Every CVE Search/ Get API key

CVE-2026-68388

smb/client: handle overlapping allocated ranges in fallocate

9.8 CriticalFix available

In the Linux kernel, the following vulnerability has been resolved:

smb/client: handle overlapping allocated ranges in fallocate

smb3_simple_fallocate_range() can skip holes when an allocated range returned by the server starts before the current fallocate offset. The skipped hole is not zero-filled, but fallocate still returns success. A later write to that hole may therefore fail with ENOSPC.

The function queries allocated ranges so that it can preserve existing contents and write zeroes only into holes. However, the server may return a range that starts before the current fallocate offset.

For example, assume the fallocate request is [100, 400) and the only allocated range returned by the server is [0, 200):

    Request:      [100, 400)
    Server range: [  0, 200)  allocated

    Correct:
    [100, 200)    allocated data, skip
    [200, 400)    hole, zero-fill

    Current:
    [100, 300)    skipped
    [300, 400)    zero-filled afterwards

The current code adds the full server range length, 200, to the current offset 100 and moves to 300. As a result, the hole in [200, 300) is skipped without being zero-filled.

Fix this by advancing only over the part of the allocated range that overlaps the current fallocate offset. Ignore ranges that end before the current offset and reject ranges whose end offset overflows.

This also prevents a malformed range length from causing an out-of-bounds zero-buffer read.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

0.51%Up 0.3 points since Aug 11, 2026
90%50%10%1%

What each source reports

CVE List Score used 9.8

smb/client: handle overlapping allocated ranges in fallocate

In the Linux kernel, the following vulnerability has been resolved:

smb/client: handle overlapping allocated ranges in fallocate

smb3_simple_fallocate_range() can skip holes when an allocated range returned by the server starts before the current fallocate offset. The skipped hole is not zero-filled, but fallocate still returns success. A later write to that hole may therefore fail with ENOSPC.

The function queries allocated ranges so that it can preserve existing contents and write zeroes only into holes. However, the server may return a range that starts before the current fallocate offset.

For example, assume the fallocate request is [100, 400) and the only allocated range returned by the server is [0, 200):

    Request:      [100, 400)
    Server range: [  0, 200)  allocated

    Correct:
    [100, 200)    allocated data, skip
    [200, 400)    hole, zero-fill

    Current:
    [100, 300)    skipped
    [300, 400)    zero-filled afterwards

The current code adds the full server range length, 200, to the current offset 100 and moves to 300. As a result, the hole in [200, 300) is skipped without being zero-filled.

Fix this by advancing only over the part of the allocated range that overlaps the current fallocate offset. Ignore ranges that end before the current offset and reject ranges whose end offset overflows.

This also prevents a malformed range length from causing an out-of-bounds zero-buffer read.

Record
CVE-2026-68388
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-125
Updated
2026-11-02
EUVDEUVD-2026-55574 9.8

In the Linux kernel, the following vulnerability has been resolved:

smb/client: handle overlapping allocated ranges in fallocate

smb3_simple_fallocate_range() can skip holes when an allocated range returned by the server starts before the current fallocate offset. The skipped hole is not zero-filled, but fallocate still returns success. A later write to that hole may therefore fail with ENOSPC.

The function queries allocated ranges so that it can preserve existing contents and write zeroes only into holes. However, the server may return a range that starts before the current fallocate offset.

For example, assume the fallocate request is [100, 400) and the only allocated range returned by the server is [0, 200):

    Request:      [100, 400)
    Server range: [  0, 200)  allocated

    Correct:
    [100, 200)    allocated data, skip
    [200, 400)    hole, zero-fill

    Current:
    [100, 300)    skipped
    [300, 400)    zero-filled afterwards

The current code adds the full server range length, 200, to the current offset 100 and moves to 300. As a result, the hole in [200, 300) is skipped without being zero-filled.

Fix this by advancing only over the part of the allocated range that overlaps the current fallocate offset. Ignore ranges that end before the current offset and reject ranges whose end offset overflows.

This also prevents a malformed range length from causing an out-of-bounds zero-buffer read.

Record
EUVD-2026-55574
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-h6fv-x4pg-r56c 9.8

In the Linux kernel, the following vulnerability has been resolved: smb/client: handle...

In the Linux kernel, the following vulnerability has been resolved:

smb/client: handle overlapping allocated ranges in fallocate

smb3_simple_fallocate_range() can skip holes when an allocated range returned by the server starts before the current fallocate offset. The skipped hole is not zero-filled, but fallocate still returns success. A later write to that hole may therefore fail with ENOSPC.

The function queries allocated ranges so that it can preserve existing contents and write zeroes only into holes. However, the server may return a range that starts before the current fallocate offset.

For example, assume the fallocate request is [100, 400) and the only allocated range returned by the server is [0, 200):

    Request:      [100, 400)
    Server range: [  0, 200)  allocated

    Correct:
    [100, 200)    allocated data, skip
    [200, 400)    hole, zero-fill

    Current:
    [100, 300)    skipped
    [300, 400)    zero-filled afterwards

The current code adds the full server range length, 200, to the current offset 100 and moves to 300. As a result, the hole in [200, 300) is skipped without being zero-filled.

Fix this by advancing only over the part of the allocated range that overlaps the current fallocate offset. Ignore ranges that end before the current offset and reject ranges whose end offset overflows.

This also prevents a malformed range length from causing an out-of-bounds zero-buffer read.

Record
GHSA-h6fv-x4pg-r56c
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-125
Updated
2026-11-02
NVD 9.8

In the Linux kernel, the following vulnerability has been resolved:

smb/client: handle overlapping allocated ranges in fallocate

smb3_simple_fallocate_range() can skip holes when an allocated range returned by the server starts before the current fallocate offset. The skipped hole is not zero-filled, but fallocate still returns success. A later write to that hole may therefore fail with ENOSPC.

The function queries allocated ranges so that it can preserve existing contents and write zeroes only into holes. However, the server may return a range that starts before the current fallocate offset.

For example, assume the fallocate request is [100, 400) and the only allocated range returned by the server is [0, 200):

    Request:      [100, 400)
    Server range: [  0, 200)  allocated

    Correct:
    [100, 200)    allocated data, skip
    [200, 400)    hole, zero-fill

    Current:
    [100, 300)    skipped
    [300, 400)    zero-filled afterwards

The current code adds the full server range length, 200, to the current offset 100 and moves to 300. As a result, the hole in [200, 300) is skipped without being zero-filled.

Fix this by advancing only over the part of the allocated range that overlaps the current fallocate offset. Ignore ranges that end before the current offset and reject ranges whose end offset overflows.

This also prevents a malformed range length from causing an out-of-bounds zero-buffer read.

Record
CVE-2026-68388
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-125
Updated
2026-11-02
OSVBELL-CVE-2026-68388 9.8
Record
BELL-CVE-2026-68388
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSV 9.8

smb/client: handle overlapping allocated ranges in fallocate

In the Linux kernel, the following vulnerability has been resolved:

smb/client: handle overlapping allocated ranges in fallocate

smb3_simple_fallocate_range() can skip holes when an allocated range returned by the server starts before the current fallocate offset. The skipped hole is not zero-filled, but fallocate still returns success. A later write to that hole may therefore fail with ENOSPC.

The function queries allocated ranges so that it can preserve existing contents and write zeroes only into holes. However, the server may return a range that starts before the current fallocate offset.

For example, assume the fallocate request is [100, 400) and the only allocated range returned by the server is [0, 200):

    Request:      [100, 400)
    Server range: [  0, 200)  allocated

    Correct:
    [100, 200)    allocated data, skip
    [200, 400)    hole, zero-fill

    Current:
    [100, 300)    skipped
    [300, 400)    zero-filled afterwards

The current code adds the full server range length, 200, to the current offset 100 and moves to 300. As a result, the hole in [200, 300) is skipped without being zero-filled.

Fix this by advancing only over the part of the allocated range that overlaps the current fallocate offset. Ignore ranges that end before the current offset and reject ranges whose end offset overflows.

This also prevents a malformed range length from causing an out-of-bounds zero-buffer read.

Record
CVE-2026-68388
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-06
Show 40 moreShow less
OSVDEBIAN-CVE-2026-68388 9.8

In the Linux kernel, the following vulnerability has been resolved: smb/client: handle overlapping allocated ranges in fallocate smb3_simple_fallocate_range() can skip holes when an allocated range returned by the server starts before the current fallocate offset. The skipped hole is not zero-filled, but fallocate still returns success. A later write to that hole may therefore fail with ENOSPC. The function queries allocated ranges so that it can preserve existing contents and write zeroes only into holes. However, the server may return a range that starts before the current fallocate offset. For example, assume the fallocate request is [100, 400) and the only allocated range returned by the server is [0, 200): Request: [100, 400) Server range: [ 0, 200) allocated Correct: [100, 200) allocated data, skip [200, 400) hole, zero-fill Current: [100, 300) skipped [300, 400) zero-filled afterwards The current code adds the full server range length, 200, to the current offset 100 and moves to 300. As a result, the hole in [200, 300) is skipped without being zero-filled. Fix this by advancing only over the part of the allocated range that overlaps the current fallocate offset. Ignore ranges that end before the current offset and reject ranges whose end offset overflows. This also prevents a malformed range length from causing an out-of-bounds zero-buffer read.

Record
DEBIAN-CVE-2026-68388
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2026-3706 9.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:net: af_can: do not leave a dangling sk pointer in can_create()On error can_create() frees the allocated sk object, but sock_init_data()has already attached it to the provided sock object. This will leave adangling sk pointer in the sock object and may cause use-after-free later.(CVE-2024-56603)

In the Linux kernel, the following vulnerability has been resolved:

hdlc_ppp: sync per-proto timers before freeing hdlc state

Each PPP control protocol (LCP/IPCP/IPV6CP) embedded in struct ppp registers a timer via timer_setup(). That struct ppp is the hdlc->state allocation, which detach_hdlc_protocol() frees with kfree() in both teardown paths: unregister_hdlc_device() and the re-attach inside attach_hdlc_protocol().

The ppp proto never registered a .detach callback, so detach_hdlc_protocol() performs no timer synchronization before the kfree(). The only cancel, timer_delete(&proto->timer) in ppp_cp_event(), is partial (it does not wait for a running callback) and only runs on the ->CLOSED transition; ppp_stop()/ppp_close() do not sync either. A ppp_timer callback already executing (blocked on ppp->lock) survives the kfree and then dereferences proto->state / ppp->lock in freed memory, leading to a use-after-free.

Fix this by adding a .detach helper that calls timer_shutdown_sync() on every per-proto timer. detach_hdlc_protocol() invokes proto->detach(dev) before kfree(hdlc->state), so timer_shutdown_sync() now runs on both free paths. timer_shutdown_sync() is used instead of timer_delete_sync() because the keepalive path re-arms the timer through add_timer()/mod_timer() and shutdown blocks any re-activation during teardown.

Initialize the per-protocol timers in ppp_ioctl() when the protocol is attached, and remove the now-redundant timer_setup() from ppp_start(), so that the timers are initialized exactly once at attach time and ppp_timer_release() never operates on uninitialized timer_list structures. attach_hdlc_protocol() uses kmalloc() (not kzalloc), so struct ppp's protos[i].timer is uninitialized garbage until the first timer_setup(); without this init-at-attach, attaching the PPP protocol without ever bringing the device up would leave timer_shutdown_sync() operating on uninitialized memory in .detach. Moving the init out of ppp_start() (which only runs on NETDEV_UP) into the attach path makes the initialization unconditional and avoids initializing the same timer_list twice.

This bug was found by static analysis.(CVE-2026-63803)

In the Linux kernel, the following vulnerability has been resolved:

parport: Fix race between port and client registration

The parport subsystem registers port devices before they are fully initialised, resulting in a race condition where client drivers such as lp can attach to ports that are not completely initialised or even being torn down.

When the port and client drivers are built as modules and loaded around the same time during boot, this occasionally results in a crash. I was able to make this happen reliably in a VM with a PC-style parallel port by patching parport_pc to fail probing:

> --- a/drivers/parport/parport_pc.c > +++ b/drivers/parport/parport_pc.c > @@ -2069,7 +2069,7 @@ static struct parport *__parport_pc_probe_port(unsigned long int base, > if (!p) > goto out3; > > - base_res = request_region(base, 3, p->name); > + base_res = NULL; > if (!base_res) > goto out4; >

and then running:

while true; do
    modprobe lp & modprobe parport_pc
wait
rmmod lp parport_pc
done

for a few seconds.

In the long term I think port registration should be changed to put the call to device_add() inside parport_announce_port(), but since the latter currently cannot fail this will require changing all port drivers.

For now, add a flag to indicate…

Record
OESA-2026-3706
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:57251 8.8

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record
RHSA-2026:57251
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:57252 8.8

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record
RHSA-2026:57252
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:57253 7.1

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record
RHSA-2026:57253
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:57254 7.1

Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update

Record
RHSA-2026:57254
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
OSVRLSA-2026:57251 7.8

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CVE-2026-43206)

  • kernel: drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CVE-2026-43237)

  • kernel: crypto: pcrypt - Fix handling of MAY_BACKLOG requests (CVE-2026-43493)

  • kernel: udf: fix partition descriptor append bookkeeping (CVE-2026-45991)

  • kernel: drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CVE-2026-45878)

  • kernel: smb/client: fix out-of-bounds read in symlink_data() (CVE-2026-46185)

  • kernel: sched/psi: fix race between file release and pressure write (CVE-2026-52991)

  • kernel: drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CVE-2026-53143)

  • kernel: drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CVE-2026-53136)

  • kernel: drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CVE-2026-53329)

  • kernel: drm/i915/gem: Fix phys BO pread/pwrite with offset (CVE-2026-53356)

  • kernel: drm/amdgpu: zero-initialize GART table on allocation (CVE-2026-53374)

  • kernel: drm/i915: Fix potential UAF in TTM object purge (CVE-2026-63884)

  • kernel: scsi: target: iscsi: Validate CHAP_R length before base64 decode (CVE-2026-63886)

  • kernel: memfd: deny writeable mappings when implying SEAL_WRITE (CVE-2026-63952)

  • kernel: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (CVE-2026-63888)

  • kernel: blk-mq: pop cached request if it is usable (CVE-2026-64017)

  • kernel: drm/amdgpu: fix amdgpu_hmm_range_get_pages (CVE-2026-63879)

  • kernel: drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CVE-2026-64219)

  • kernel: smb: client: fix double-free in SMB2_open() replay (CVE-2026-64382)

  • kernel: smb: client: mask server-provided mode to 07777 in modefromsid (CVE-2026-64379)

  • kernel: smb: client: fix query_info() replay double-free (CVE-2026-64386)

  • kernel: posix-cpu-timers: Prevent UAF caused by non-leader exec() race (CVE-2026-64560)

  • kernel: smb/client: handle overlapping allocated ranges in fallocate (CVE-2026-68388)

Bug Fix(es) and Enhancement(s):

  • CLONE - Rocky Linux 10.2.z xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (JIRA:Rocky Linux-223954)

  • vhost: reset the vring metadata cache on vring reconfiguration [rhel-10.2.z] (JIRA:Rocky Linux-224545)

  • cifs: periodic IO errors when rename races with lease break [rhel-10.2.z] (JIRA:Rocky Linux-235459)

  • cifs: smb1 directory listings from xp server returning EINVAL and EIO [rhel-10.2.z] (JIRA:Rocky Linux-235812)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:57251
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:57252 7.8

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CVE-2026-43233)

  • kernel: drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CVE-2026-43206)

  • kernel: drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CVE-2026-43237)

  • kernel: udf: fix partition descriptor append bookkeeping (CVE-2026-45991)

  • kernel: drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CVE-2026-45878)

  • kernel: ip6_gre: Use cached t->net in ip6erspan_changelink() (CVE-2026-46120)

  • kernel: sched/psi: fix race between file release and pressure write (CVE-2026-52991)

  • kernel: drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CVE-2026-53143)

  • kernel: drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CVE-2026-53136)

  • kernel: mm/huge_memory: update file PMD counter before folio_put() (CVE-2026-53189)

  • kernel: drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CVE-2026-53329)

  • kernel: drm/i915/gem: Fix phys BO pread/pwrite with offset (CVE-2026-53356)

  • kernel: drm/amdgpu: zero-initialize GART table on allocation (CVE-2026-53374)

  • kernel: drm/i915: Fix potential UAF in TTM object purge (CVE-2026-63884)

  • kernel: netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CVE-2026-64007)

  • kernel: memfd: deny writeable mappings when implying SEAL_WRITE (CVE-2026-63952)

  • kernel: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (CVE-2026-63888)

  • kernel: drm/amdgpu: fix amdgpu_hmm_range_get_pages (CVE-2026-63879)

  • kernel: net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CVE-2026-64048)

  • kernel: drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CVE-2026-64219)

  • kernel: smb: client: fix double-free in SMB2_open() replay (CVE-2026-64382)

  • kernel: smb: client: mask server-provided mode to 07777 in modefromsid (CVE-2026-64379)

  • kernel: smb: client: fix query_info() replay double-free (CVE-2026-64386)

  • kernel: posix-cpu-timers: Prevent UAF caused by non-leader exec() race (CVE-2026-64560)

  • kernel: smb: client: validate DFS referral PathConsumed (CVE-2026-68343)

  • kernel: smb/client: handle overlapping allocated ranges in fallocate (CVE-2026-68388)

Bug Fix(es) and Enhancement(s):

  • kernel 5.14.0-687.5.1.el9_8 breaks wifi when using FIPS (JIRA:Rocky Linux-181065)

  • vhost: reset the vring metadata cache on vring reconfiguration [rhel-9.8.z] (JIRA:Rocky Linux-224549)

  • cifs: smb1 directory listings from xp server returning EINVAL and EIO [rhel-9.8.z] (JIRA:Rocky Linux-235811)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:57252
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:57253 7.1

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (CVE-2024-56602)

  • kernel: ip6_gre: Use cached t->net in ip6erspan_changelink() (CVE-2026-46120)

  • kernel: sched/psi: fix race between file release and pressure write (CVE-2026-52991)

  • kernel: mm/huge_memory: update file PMD counter before folio_put() (CVE-2026-53189)

  • kernel: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (CVE-2026-63888)

  • kernel: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CVE-2026-63887)

  • kernel: net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CVE-2026-64048)

  • kernel: smb: client: mask server-provided mode to 07777 in modefromsid (CVE-2026-64379)

  • kernel: smb/client: handle overlapping allocated ranges in fallocate (CVE-2026-68388)

Bug Fix(es) and Enhancement(s):

  • sfc: TX queue stalls and NIC resets caused by GFP_ATOMIC allocation failures after Rocky Linux 8.10 kernel update (JIRA:Rocky Linux-219767)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:57253
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
OSVRLSA-2026:57254 7.1

Important: kernel-rt security, bug fix, and enhancement update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

  • kernel: net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (CVE-2024-56602)

  • kernel: ip6_gre: Use cached t->net in ip6erspan_changelink() (CVE-2026-46120)

  • kernel: sched/psi: fix race between file release and pressure write (CVE-2026-52991)

  • kernel: mm/huge_memory: update file PMD counter before folio_put() (CVE-2026-53189)

  • kernel: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (CVE-2026-63888)

  • kernel: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CVE-2026-63887)

  • kernel: net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CVE-2026-64048)

  • kernel: smb: client: mask server-provided mode to 07777 in modefromsid (CVE-2026-64379)

  • kernel: smb/client: handle overlapping allocated ranges in fallocate (CVE-2026-68388)

Bug Fix(es) and Enhancement(s):

  • sfc: TX queue stalls and NIC resets caused by GFP_ATOMIC allocation failures after Rocky Linux 8.10 kernel update (JIRA:Rocky Linux-219767)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:57254
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2026-68388 5.3

In the Linux kernel, the following vulnerability has been resolved: smb/client: handle overlapping allocated ranges in fallocate smb3_simple_fallocate_range() can skip holes when an allocated range returned by the server starts before the current fallocate offset. The skipped hole is not zero-filled, but fallocate still returns success. A later write to that hole may therefore fail with ENOSPC. The function queries allocated ranges so that it can preserve existing contents and write zeroes only into holes. However, the server may return a range that starts before the current fallocate offset. For example, assume the fallocate request is [100, 400) and the only allocated range returned by the server is [0, 200): Request: [100, 400) Server range: [ 0, 200) allocated Correct: [100, 200) allocated data, skip [200, 400) hole, zero-fill Current: [100, 300) skipped [300, 400) zero-filled afterwards The current code adds the full server range length, 200, to the current offset 100 and moves to 300. As a result, the hole in [200, 300) is skipped without being zero-filled. Fix this by advancing only over the part of the allocated range that overlaps the current fallocate offset. Ignore ranges that end before the current offset and reject ranges whose end offset overflows. This also prevents a malformed range length from causing an out-of-bounds zero-buffer read.

Record
UBUNTU-CVE-2026-68388
CVSS 4.0
5.3 MediumCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-10
OSVALSA-2026:57251 No score

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CVE-2026-43206)
  • kernel: drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CVE-2026-43237)
  • kernel: crypto: pcrypt - Fix handling of MAY_BACKLOG requests (CVE-2026-43493)
  • kernel: udf: fix partition descriptor append bookkeeping (CVE-2026-45991)
  • kernel: drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CVE-2026-45878)
  • kernel: smb/client: fix out-of-bounds read in symlink_data() (CVE-2026-46185)
  • kernel: sched/psi: fix race between file release and pressure write (CVE-2026-52991)
  • kernel: drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CVE-2026-53143)
  • kernel: drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CVE-2026-53136)
  • kernel: drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CVE-2026-53329)
  • kernel: drm/i915/gem: Fix phys BO pread/pwrite with offset (CVE-2026-53356)
  • kernel: drm/amdgpu: zero-initialize GART table on allocation (CVE-2026-53374)
  • kernel: drm/i915: Fix potential UAF in TTM object purge (CVE-2026-63884)
  • kernel: scsi: target: iscsi: Validate CHAP_R length before base64 decode (CVE-2026-63886)
  • kernel: memfd: deny writeable mappings when implying SEAL_WRITE (CVE-2026-63952)
  • kernel: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (CVE-2026-63888)
  • kernel: blk-mq: pop cached request if it is usable (CVE-2026-64017)
  • kernel: drm/amdgpu: fix amdgpu_hmm_range_get_pages (CVE-2026-63879)
  • kernel: drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CVE-2026-64219)
  • kernel: smb: client: fix double-free in SMB2_open() replay (CVE-2026-64382)
  • kernel: smb: client: mask server-provided mode to 07777 in modefromsid (CVE-2026-64379)
  • kernel: smb: client: fix query_info() replay double-free (CVE-2026-64386)
  • kernel: posix-cpu-timers: Prevent UAF caused by non-leader exec() race (CVE-2026-64560)
  • kernel: smb/client: handle overlapping allocated ranges in fallocate (CVE-2026-68388)

Bug Fix(es) and Enhancement(s):

  • CLONE - AlmaLinux 10.2.z xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (JIRA:AlmaLinux-223954)
  • vhost: reset the vring metadata cache on vring reconfiguration [almalinux-10.2.z] (JIRA:AlmaLinux-224545)
  • cifs: periodic IO errors when rename races with lease break [almalinux-10.2.z] (JIRA:AlmaLinux-235459)
  • cifs: smb1 directory listings from xp server returning EINVAL and EIO [almalinux-10.2.z] (JIRA:AlmaLinux-235812)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:57251
Updated
2026-11-02
OSVALSA-2026:57252 No score

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CVE-2026-43233)
  • kernel: drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CVE-2026-43206)
  • kernel: drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CVE-2026-43237)
  • kernel: udf: fix partition descriptor append bookkeeping (CVE-2026-45991)
  • kernel: drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CVE-2026-45878)
  • kernel: ip6_gre: Use cached t->net in ip6erspan_changelink() (CVE-2026-46120)
  • kernel: sched/psi: fix race between file release and pressure write (CVE-2026-52991)
  • kernel: drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CVE-2026-53143)
  • kernel: drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CVE-2026-53136)
  • kernel: mm/huge_memory: update file PMD counter before folio_put() (CVE-2026-53189)
  • kernel: drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CVE-2026-53329)
  • kernel: drm/i915/gem: Fix phys BO pread/pwrite with offset (CVE-2026-53356)
  • kernel: drm/amdgpu: zero-initialize GART table on allocation (CVE-2026-53374)
  • kernel: drm/i915: Fix potential UAF in TTM object purge (CVE-2026-63884)
  • kernel: netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CVE-2026-64007)
  • kernel: memfd: deny writeable mappings when implying SEAL_WRITE (CVE-2026-63952)
  • kernel: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (CVE-2026-63888)
  • kernel: drm/amdgpu: fix amdgpu_hmm_range_get_pages (CVE-2026-63879)
  • kernel: net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CVE-2026-64048)
  • kernel: drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CVE-2026-64219)
  • kernel: smb: client: fix double-free in SMB2_open() replay (CVE-2026-64382)
  • kernel: smb: client: mask server-provided mode to 07777 in modefromsid (CVE-2026-64379)
  • kernel: smb: client: fix query_info() replay double-free (CVE-2026-64386)
  • kernel: posix-cpu-timers: Prevent UAF caused by non-leader exec() race (CVE-2026-64560)
  • kernel: smb: client: validate DFS referral PathConsumed (CVE-2026-68343)
  • kernel: smb/client: handle overlapping allocated ranges in fallocate (CVE-2026-68388)

Bug Fix(es) and Enhancement(s):

  • kernel 5.14.0-687.5.1.el9_8 breaks wifi when using FIPS (JIRA:AlmaLinux-181065)
  • vhost: reset the vring metadata cache on vring reconfiguration [almalinux-9.8.z] (JIRA:AlmaLinux-224549)
  • cifs: smb1 directory listings from xp server returning EINVAL and EIO [almalinux-9.8.z] (JIRA:AlmaLinux-235811)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:57252
Updated
2026-11-02
OSVALSA-2026:57253 No score

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (CVE-2024-56602)
  • kernel: ip6_gre: Use cached t->net in ip6erspan_changelink() (CVE-2026-46120)
  • kernel: sched/psi: fix race between file release and pressure write (CVE-2026-52991)
  • kernel: mm/huge_memory: update file PMD counter before folio_put() (CVE-2026-53189)
  • kernel: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (CVE-2026-63888)
  • kernel: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CVE-2026-63887)
  • kernel: net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CVE-2026-64048)
  • kernel: smb: client: mask server-provided mode to 07777 in modefromsid (CVE-2026-64379)
  • kernel: smb/client: handle overlapping allocated ranges in fallocate (CVE-2026-68388)

Bug Fix(es) and Enhancement(s):

  • sfc: TX queue stalls and NIC resets caused by GFP_ATOMIC allocation failures after AlmaLinux 8.10 kernel update (JIRA:AlmaLinux-219767)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:57253
Updated
2026-11-02
OSVALSA-2026:57254 No score

Important: kernel-rt security, bug fix, and enhancement update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

  • kernel: net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (CVE-2024-56602)
  • kernel: ip6_gre: Use cached t->net in ip6erspan_changelink() (CVE-2026-46120)
  • kernel: sched/psi: fix race between file release and pressure write (CVE-2026-52991)
  • kernel: mm/huge_memory: update file PMD counter before folio_put() (CVE-2026-53189)
  • kernel: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (CVE-2026-63888)
  • kernel: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CVE-2026-63887)
  • kernel: net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CVE-2026-64048)
  • kernel: smb: client: mask server-provided mode to 07777 in modefromsid (CVE-2026-64379)
  • kernel: smb/client: handle overlapping allocated ranges in fallocate (CVE-2026-68388)

Bug Fix(es) and Enhancement(s):

  • sfc: TX queue stalls and NIC resets caused by GFP_ATOMIC allocation failures after AlmaLinux 8.10 kernel update (JIRA:AlmaLinux-219767)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:57254
Updated
2026-11-02
OSVCLSA-2026-1787935638 No score

kernel: Fix of 164 CVEs

  • wifi: brcmfmac: ensure CLM version is null-terminated to prevent stack-out-of-bounds {CVE-2023-53582}
  • net/sched: accept TCA_STAB only for root qdisc {CVE-2024-50039}
  • bpf, sockmap: Several fixes to bpf_msg_pop_data {CVE-2024-56720}
  • net: add more sanity checks to qdisc_pkt_len_init() {CVE-2024-49948}
  • nvme-tcp: sanitize request list handling {CVE-2025-38264}
  • smb: client: fix double free of TCP_Server_Info::hostname {CVE-2025-21673}
  • net/sched: ets: Remove drr class from the active list if it changes to strict {CVE-2025-68815}
  • net: rtnetlink: zero ifla_vf_broadcast to avoid stack infoleak in rtnl_fill_vfinfo {CVE-2026-46132}
  • RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send {CVE-2026-45856}
  • Bluetooth: hci_event: fix potential UAF in SSP passkey handlers {CVE-2026-46056}
  • bpf: Fix bpf_xdp_store_bytes proto for read-only arg {CVE-2026-45886}
  • libceph: Fix slab-out-of-bounds access in auth message processing {CVE-2026-46119}
  • nfsd: never defer requests during idmap lookup {CVE-2026-45983}
  • openvswitch: cap upcall PID array size and pre-size vport replies {CVE-2026-45840}
  • procfs: fix missing RCU protection when reading real_parent in do_task_stat() {CVE-2026-46259}
  • dm mirror: fix integer overflow in create_dirty_log() {CVE-2026-46023}
  • thermal: core: Fix thermal zone governor cleanup issues {CVE-2026-46021}
  • tcp: call sk_data_ready() after listener migration {CVE-2026-46015}
  • dm: fix a buffer overflow in ioctl processing {CVE-2026-46294}
  • Bluetooth: RFCOMM: validate skb length in MCC handlers {CVE-2026-53254}
  • xfrm: espintcp: do not reuse an in-progress partial send {CVE-2026-52935}
  • USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() {CVE-2026-53195}
  • netfilter: nft_exthdr: fix register tracking for F_PRESENT flag {CVE-2026-53218}
  • netfilter: xt_policy: fix strict mode inbound policy matching {CVE-2026-52920}
  • Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() {CVE-2026-53256}
  • tipc: fix double-free in tipc_buf_append() {CVE-2026-52993}
  • Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER {CVE-2026-53072}
  • netfilter: conntrack: remove sprintf usage {CVE-2026-53002}
  • smb: client: fix krb5 mount with username option {CVE-2026-31392}
  • netfilter: nft_tunnel: fix use-after-free on object destroy {CVE-2026-53212}
  • USB: serial: io_ti: fix heap overflow in get_manuf_info() {CVE-2026-53196}
  • crypto: ccp - copy IV using skcipher ivsize {CVE-2026-53016}
  • netfilter: conntrack_irc: fix possible out-of-bounds read {CVE-2026-53268}
  • IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN {CVE-2026-53176}
  • fuse: reject fuse_notify() pagecache ops on directories {CVE-2026-53168}
  • ppp: require CAP_NET_ADMIN in target netns for unattached ioctls {CVE-2026-53075}
  • xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() {CVE-2026-53239}
  • ipv4: restrict IPOPT_SSRR and IPOPT_LSRR options {CVE-2026-53249}
  • ipv6: sit: reload inner IPv6 header after GSO offloads {CVE-2026-53228}
  • uio_hv_generic: Let userspace take care of interrupt mask {CVE-2025-40048}
  • net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove {CVE-2026-52947}
  • net: guard timestamp cmsgs to real error queue skbs {CVE-2026-53223}
  • libceph: Fix potential out-of-bounds access in crush_decode() {CVE-2026-52955}
  • libceph: Fix potential null-ptr-deref in decode_choose_args() {CVE-2026-52957}
  • netfilter: nft_ct: fix missing expect put in obj eval {CVE-2026-52970}
  • netfilter: nf_tables: always walk all pending catchall elements {CVE-2026-23278}
  • crypto: af_alg - Cap AEAD AD length to 0x80000000 {CVE-2026-52972}
  • wifi: cfg80211: advance loop vars in cfg80211_merge_profile() {CVE-2026-64174}
  • NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr {CVE-2026-53391}
  • Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock {CVE-2026-63945}
  • pNFS: Fix use-after-free in pnfs_update_layout() {CVE-2026-63800}
  • RDMA/vmw_pvrdma: Fix…
Record
CLSA-2026-1787935638
Updated
2026-11-02
OSVCLSA-2026-1788168285 No score

kernel: Fix of 193 CVEs

  • mac802154: llsec: reject frames shorter than the authentication tag {CVE-2026-68125}
  • KVM: x86/mmu: Fix use-after-free on vendor module reload {CVE-2026-68428}
  • wifi: mwifiex: fix NULL dereference when the AP has HT-cap but no HT-oper {CVE-2026-68197}
  • bpf: account for current allocated stack depth in widen_imprecise_scalars() {CVE-2025-68208}
  • tun: free page on build_skb failure in tun_xdp_one() {CVE-2026-46322}
  • smb: client: fix potential cfid UAF in smb2_query_info_compound {CVE-2025-40320}
  • net/packet: avoid fanout hook re-registration after unregister {CVE-2026-68338}
  • wifi: cfg80211: cancel sched scan results work on unregister {CVE-2026-68414}
  • binfmt_misc: set have_execfd only once the interpreter is opened {CVE-2026-68186}
  • tracing: Fix resource leak on mmiotrace trace_pipe close {CVE-2026-68175}
  • tipc: fix u16 MTU truncation in media and bearer MTU validation {CVE-2026-68297}
  • net: gro: fix double aggregation of flush-marked skbs {CVE-2026-68136}
  • bpf, sockmap: Reject unhashed UDP sockets on sockmap update {CVE-2026-68386}
  • wifi: brcmfmac: fix 802.1X-SHA256 call trace warning {CVE-2026-68304}
  • udf: fix partition descriptor append bookkeeping {CVE-2026-45991}
  • Bluetooth: SCO: fix race conditions in sco_sock_connect() {CVE-2026-43023}
  • smb: client: validate dacloffset before building DACL pointers {CVE-2026-46195}
  • smb/client: fix out-of-bounds read in symlink_data() {CVE-2026-46185}
  • net: rtnetlink: zero ifla_vf_broadcast to avoid stack infoleak in rtnl_fill_vfinfo {CVE-2026-46132}
  • Bluetooth: hci_event: fix potential UAF in SSP passkey handlers {CVE-2026-46056}
  • RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send {CVE-2026-45856}
  • RDMA/mana: Validate rx_hash_key_len {CVE-2026-46145}
  • scsi: qla2xxx: Completely fix fcport double free {CVE-2026-43414}
  • bpf: Fix bpf_xdp_store_bytes proto for read-only arg {CVE-2026-45886}
  • libceph: Fix slab-out-of-bounds access in auth message processing {CVE-2026-46119}
  • wifi: mac80211: use safe list iteration in radar detect work {CVE-2026-46166}
  • RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads {CVE-2026-46114}
  • nfsd: never defer requests during idmap lookup {CVE-2026-45983}
  • drop_monitor: fix size calculations for 64-bit attributes {CVE-2026-68287}
  • openvswitch: cap upcall PID array size and pre-size vport replies {CVE-2026-45840}
  • procfs: fix missing RCU protection when reading real_parent in do_task_stat() {CVE-2026-46259}
  • wifi: mwifiex: fix use-after-free in mwifiex_adapter_cleanup() {CVE-2026-46069}
  • dm mirror: fix integer overflow in create_dirty_log() {CVE-2026-46023}
  • netfilter: nft_inner: Fix IPv6 inner_thoff desync {CVE-2026-46244}
  • drm/dp_mst: Handle torn-down topology gracefully in drm_dp_mst_topology_queue_probe() {CVE-2026-68429}
  • crypto: authencesn - reject short ahash digests during instance creation {CVE-2026-46033}
  • RDMA/rxe: Fix race condition in QP timer handlers {CVE-2026-45910}
  • wifi: mac80211: remove station if connection prep fails {CVE-2026-46125}
  • tcp: call sk_data_ready() after listener migration {CVE-2026-46015}
  • scsi: lpfc: Avoid potential ndlp use-after-free in dev_loss_tmo_callbk {CVE-2025-38289}
  • net/sched: act_ct: Only release RCU read lock after ct_ft {CVE-2026-46319}
  • dm: fix a buffer overflow in ioctl processing {CVE-2026-46294}
  • io-wq: check that the predecessor is hashed in io_wq_remove_pending() {CVE-2026-46274}
  • wifi: mac80211: drop stray 'static' from fast-RX rx_result {CVE-2026-46152}
  • io_uring/poll: fix signed comparison in io_poll_get_ownership() {CVE-2026-52933}
  • xfrm: espintcp: do not reuse an in-progress partial send {CVE-2026-52935}
  • Bluetooth: btusb: validate Realtek vendor event length {CVE-2026-68339}
  • Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() {CVE-2026-53256}
  • Bluetooth: RFCOMM: validate skb length in MCC handlers {CVE-2026-53254}
  • netfilter: nft_exthdr: fix register tracking for F_PRESENT flag {CVE-2026-53218}
  • ipc: limit next_id…
Record
CLSA-2026-1788168285
Updated
2026-11-02
OSVCLSA-2026-1789141176 No score

kernel: Fix of 131 CVEs

  • net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-63829}
  • USB: legousbtower: fix use-after-free on disconnect race {CVE-2026-64340}
  • udf: validate sparing table length as an entry count, not a byte count {CVE-2026-64322}
  • ipv4: igmp: remove multicast group from hash table on device destruction {CVE-2026-64423}
  • USB: ldusb: fix use-after-free on disconnect race {CVE-2026-64343}
  • USB: idmouse: fix use-after-free on disconnect race {CVE-2026-64344}
  • net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers {CVE-2026-74700}
  • ipvs: clear IPv4 options after rebasing tunnel ICMP errors {CVE-2026-74669}
  • netfilter: ebt_nflog: pin the NFLOG backend {CVE-2026-74660}
  • ipv4: fix use-after-free in fib_nhc_update_mtu() {CVE-2026-74656}
  • ALSA: usx2y: bound the hwdep mmap fault offset {CVE-2026-74641}
  • ipv6: prevent in6_dev_get() from resurrecting inet6_dev {CVE-2026-74630}
  • tipc: read le->link under the node lock in tipc_node_link_down() {CVE-2026-74609}
  • ip6_tunnel: clear skb2->cb[] in ip6ip6_err() {CVE-2026-74597}
  • bpf, sockmap: Fix sk_redir use-after-free in send verdict {CVE-2026-74589}
  • sctp: keep chunk->transport in step with the list it is queued on {CVE-2026-74588}
  • netfilter: nf_tables: make nft_object rhltable per table {CVE-2026-74565}
  • scsi: scsi_debug: Fix REPORT ZONES alloc_len underflow OOB write {CVE-2026-74470}
  • nfs: use nfsi->rwsem to protect traversal of the file lock list {CVE-2026-72472}
  • geneve: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-68142}
  • sctp: fix use-after-free of cached ASCONF chunk {CVE-2026-74587}
  • net/packet: reset the MAC header on the packet-socket transmit path {CVE-2026-74667}
  • ALSA: usb-audio: fix OOB write on Type II inbound URBs {CVE-2026-74682}
  • sctp: clear control chunk transport if it is being removed {CVE-2026-74688}
  • udp: fix potential use-after-free in tunnel segmentation {CVE-2026-74705}
  • bpf: Preserve pointer state for commuted arithmetic {CVE-2026-74720}
  • RDMA/siw: bound Read Response placement to the RREAD length {CVE-2026-64268}
  • libceph: Avoid using invalid osd indices from primary_temp {CVE-2026-80558}
  • drm/i915: Fix potential UAF in TTM object purge {CVE-2026-63884}
  • wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request {CVE-2026-68363}
  • ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps() {CVE-2026-68160}
  • libceph: Reject monmaps advertising zero monitors {CVE-2026-68155}
  • sctp: fix auth_hmacs array size in struct sctp_cookie {CVE-2026-68376}
  • Bluetooth: hci_sync: Protect UUID list traversal {CVE-2026-68189}
  • net: slip: serialize receive against buffer reallocation {CVE-2026-68143}
  • libceph: remove debugfs files before client teardown {CVE-2026-68153}
  • media: rtl2832: fix use-after-free in rtl2832_remove() {CVE-2026-68214}
  • sctp: fix auth_chunk_list capacity check in sctp_auth_ep_add_chunkid {CVE-2026-68320}
  • drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async {CVE-2026-64219}
  • pppoe: reload header pointer after dev_hard_header() {CVE-2026-68121}
  • libceph: Fix multiplication overflow in decode_new_up_state_weight() {CVE-2026-68158}
  • ALSA: usb-audio: fix OOB write in snd_usbmidi_akai_output() {CVE-2026-74499}
  • fbdev: Fix invalid page access after closing deferred I/O devices {CVE-2023-52731}
  • Bluetooth: use RCU for hci_conn_params and iterate safely in hci_sync {CVE-2023-53252}
  • net_sched: red: fix a race in __red_change() {CVE-2025-38108}
  • iio: event: Fix event FIFO reset race {CVE-2026-64496}
  • netfilter: ctnetlink: ensure safe access to master conntrack {CVE-2026-43116}
  • NFSv4: include MAY_WRITE in open permission mask for O_TRUNC {CVE-2026-64298}
  • openvswitch: fix GSO userspace truncation underflow {CVE-2026-68123}
  • media: cx23885: add ioremap return check and cleanup {CVE-2026-68226}
  • tracing: Fix mmiotrace possible NULL dereferencing of hiter->dev {CVE-2026-68176} -…
Record
CLSA-2026-1789141176
Updated
2026-11-02
OSVMGASA-2026-0336 No score

Updated kernel, kmod-xtables-addons, kmod-virtualbox, kmod-nvidia-current-wopengpu & drakx-installer-images packages fix security vulnerabilities

Upstream kernel 6.18.44 version fixes bugs and vulnerabilities. The kmod-xtables-addons, kmod-virtualbox, kmod-nvidia-current-wopengpu & drakx-installer-images packages have been updated to work with this new kernel.

Record
MGASA-2026-0336
Updated
2026-11-02
OSVMGASA-2026-0337 No score

Updated kernel-linus packages fix security vulnerabilities

Vanilla upstream kernel version 6.18.44 fixes vulnerabilities. For information about the vulnerabilities see the links.

Record
MGASA-2026-0337
Updated
2026-11-02
OSVSUSE-SU-2026:24550-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2025-68219: cifs: fix memory leak in smb3_fs_context_parse_param error path (bsc#1255222).
  • CVE-2026-31708: smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path (bsc#1264022).
  • CVE-2026-31709: smb: client: validate the whole DACL before rewriting it in cifsacl (bsc#1264024).
  • CVE-2026-43350: smb: client: require a full NFS mode SID before reading mode bits (bsc#1264985).
  • CVE-2026-46155: smb/client: fix out-of-bounds read in smb2_compound_op() (bsc#1267720).
  • CVE-2026-64324: udf: validate free block extents against the partition length (bsc#1273970).
  • CVE-2026-64370: posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (bsc#1273805).
  • CVE-2026-64380: smb: client: harden POSIX SID length parsing (bsc#1273557).
  • CVE-2026-64413: netfilter: ebtables: zero chainstack array (bsc#1274082).
  • CVE-2026-64435: audit: Fix data races of skb_queue_len() readers on audit_queue (bsc#1274080).
  • CVE-2026-68186: binfmt_misc: set have_execfd only once the interpreter is opened (bsc#1274949).
  • CVE-2026-68447: drm/amdkfd: clamp v9 CRIU control stack checkpoint copy to BO size (bsc#1276280).
  • CVE-2026-72010: cgroup/cpuset: rebind mm mempolicy to effective_mems, not mems_allowed (bsc#1276776).
  • CVE-2026-72110: bpf,fork: wipe ->bpf_storage before bailouts that access it (bsc#1277357).
  • CVE-2026-72111: bpf: Reset register bounds before narrowing retval range in check_mem_access() (bsc#1277389).
  • CVE-2026-72127: netdev-genl: report NAPI thread PID in the caller's pid namespace (bsc#1277542).
  • CVE-2026-72250: netfilter: nf_conntrack_reasm: guard mac_header adjustment after IPv6 defrag (bsc#1277663).
  • CVE-2026-72253: netfilter: nf_conntrack_sip: validate skb_dst() before accessing it (bsc#1277665).
  • CVE-2026-72318: cifs: validate DFS referral string offsets (bsc#1275939).
  • CVE-2026-72400: seg6: validate SRH length before reading fixed fields (bsc#1278030).
  • CVE-2026-72405: net: udp_tunnel: prevent double queueing in udp_tunnel_nic_device_sync (bsc#1278033).
  • CVE-2026-72416: netfilter: nft_compat: ebtables emulation must reject non-bridge targets (bsc#1278041).
  • CVE-2026-72428: bpf: Fix stack slot index in nospec checks (bsc#1278050).
  • CVE-2026-74368: wifi: ath12k: fix memory leak in ath12k_wifi7_dp_rx_h_verify_tkip_mic() (bsc#1277103).
  • CVE-2026-74399: evm: terminate and bound the evm_xattrs read buffer (bsc#1278319).
  • CVE-2026-74565: netfilter: nf_tables: make nft_object rhltable per table (bsc#1275568).
  • CVE-2026-74613: vsock/virtio: avoid refilling the RX queue after teardown (bsc#1277903).
  • CVE-2026-74620: net/sched: act_gact, act_police: range check the fallback control action (bsc#1277044).
  • CVE-2026-74624: netfilter: nf_conntrack: defer invalid log until after unlock (bsc#1277599).
  • CVE-2026-74715: net: netfilter: Make ct zone opts configurable for bpf ct helpers (bsc#1277890).
  • CVE-2026-74720: bpf: Preserve pointer state for commuted arithmetic (bsc#1276574).
  • CVE-2026-74746: netfilter: flowtable: publish GC-visible tuple last (bsc#1278101).
  • CVE-2026-74748: netfilter: ipset: fix refcount race between list:set GC and swap (bsc#1277578).
  • CVE-2026-80572: Input: byd - synchronize timer deletion before freeing private data (bsc#1277338).
  • CVE-2026-80602: perf/x86/amd/lbr: Fix kernel address leakage (bsc#1278123).
  • CVE-2026-80637: netfilter: synproxy: fix unaligned memory access in timestamp adjustment (bsc#1278343).
  • CVE-2026-80684: KVM: s390: pci: Fix NULL dereference on AIBV allocation failure (bsc#1277467).
  • CVE-2026-80709: s390/zcrypt: Fix wrong domain value verification with EP11 CPRBs (bsc#1278202).
  • CVE-2026-80717: sctp: validate Adaptation Indication parameter length (bsc#1277836).
  • CVE-2026-80755: selinux: reject a permission value exceeding the class permission count (bsc#1278415).
  • CVE-2026-80757: selinux: reject a…
Record
SUSE-SU-2026:24550-1
Updated
2026-11-06
OSVSUSE-SU-2026:5091-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2025-68219: cifs: fix memory leak in smb3_fs_context_parse_param error path (bsc#1255222).
  • CVE-2026-31708: smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path (bsc#1264022).
  • CVE-2026-31709: smb: client: validate the whole DACL before rewriting it in cifsacl (bsc#1264024).
  • CVE-2026-43350: smb: client: require a full NFS mode SID before reading mode bits (bsc#1264985).
  • CVE-2026-46155: smb/client: fix out-of-bounds read in smb2_compound_op() (bsc#1267720).
  • CVE-2026-64370: posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (bsc#1273805).
  • CVE-2026-64380: smb: client: harden POSIX SID length parsing (bsc#1273557).
  • CVE-2026-64430: NTB: epf: Avoid calling pci_irq_vector() from hardirq context (bsc#1274257).
  • CVE-2026-64435: audit: Fix data races of skb_queue_len() readers on audit_queue (bsc#1274080).
  • CVE-2026-68186: binfmt_misc: set have_execfd only once the interpreter is opened (bsc#1274949).
  • CVE-2026-68436: drm/amd/display: use kvzalloc to allocate struct dc (bsc#1276275).
  • CVE-2026-68447: drm/amdkfd: clamp v9 CRIU control stack checkpoint copy to BO size (bsc#1276280).
  • CVE-2026-68460: f2fs: fix potential deadlock in f2fs_balance_fs() (bsc#1276774).
  • CVE-2026-72010: cgroup/cpuset: rebind mm mempolicy to effective_mems, not mems_allowed (bsc#1276776).
  • CVE-2026-72073: mmc: vub300: fix use-after-free on probe failure (bsc#1277157).
  • CVE-2026-72110: bpf,fork: wipe ->bpf_storage before bailouts that access it (bsc#1277357).
  • CVE-2026-72111: bpf: Reset register bounds before narrowing retval range in check_mem_access() (bsc#1277389).
  • CVE-2026-72250: netfilter: nf_conntrack_reasm: guard mac_header adjustment after IPv6 defrag (bsc#1277663).
  • CVE-2026-72253: netfilter: nf_conntrack_sip: validate skb_dst() before accessing it (bsc#1277665).
  • CVE-2026-72318: cifs: validate DFS referral string offsets (bsc#1275939).
  • CVE-2026-72405: net: udp_tunnel: prevent double queueing in udp_tunnel_nic_device_sync (bsc#1278033).
  • CVE-2026-72416: netfilter: nft_compat: ebtables emulation must reject non-bridge targets (bsc#1278041).
  • CVE-2026-72428: bpf: Fix stack slot index in nospec checks (bsc#1278050).
  • CVE-2026-74368: wifi: ath12k: fix memory leak in ath12k_wifi7_dp_rx_h_verify_tkip_mic() (bsc#1277103).
  • CVE-2026-74472: ublk: reset kernel-owned dev_info fields in ublk_ctrl_add_dev() (bsc#1277785).
  • CVE-2026-74613: vsock/virtio: avoid refilling the RX queue after teardown (bsc#1277903).
  • CVE-2026-74620: net/sched: act_gact, act_police: range check the fallback control action (bsc#1277044).
  • CVE-2026-74624: netfilter: nf_conntrack: defer invalid log until after unlock (bsc#1277599).
  • CVE-2026-74715: net: netfilter: Make ct zone opts configurable for bpf ct helpers (bsc#1277890).
  • CVE-2026-74746: netfilter: flowtable: publish GC-visible tuple last (bsc#1278101).
  • CVE-2026-74748: netfilter: ipset: fix refcount race between list:set GC and swap (bsc#1277578).
  • CVE-2026-80572: Input: byd - synchronize timer deletion before freeing private data (bsc#1277338).
  • CVE-2026-80602: perf/x86/amd/lbr: Fix kernel address leakage (bsc#1278123).
  • CVE-2026-80637: netfilter: synproxy: fix unaligned memory access in timestamp adjustment (bsc#1278343).
  • CVE-2026-80717: sctp: validate Adaptation Indication parameter length (bsc#1277836).
  • CVE-2026-80755: selinux: reject a permission value exceeding the class permission count (bsc#1278415).
  • CVE-2026-80757: selinux: reject a class permission count below its inherited common (bsc#1278711).
  • CVE-2026-80808: ext4: stop retrying saturated xattr cache entries (bsc#1279795).
  • CVE-2026-80809: ocfs2: fix missing metadata reservation for large xattrs (bsc#1279606).
  • CVE-2026-80855: fuse: fix invalidate lock leak on open O_TRUNC DAX failure (bsc#1279564).
  • CVE-2026-80879: ocfs2: fix circular locking dependency…
Record
SUSE-SU-2026:5091-1
Updated
2026-11-04
OSVSUSE-SU-2026:5121-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2025-40100: btrfs: do not assert we found block group item when creating free space tree (bsc#1252918).
  • CVE-2025-68741: scsi: qla2xxx: Fix improper freeing of purex item (bsc#1255703 bsc#1275737).
  • CVE-2026-23059: scsi: qla2xxx: Sanitize payload size to prevent member overflow (bsc#1257737 bsc#1275737).
  • CVE-2026-46195: smb: client: validate dacloffset before building DACL pointers (bsc#1266860).
  • CVE-2026-64370: posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (bsc#1273805).
  • CVE-2026-64379: smb: client: mask server-provided mode to 07777 in modefromsid (bsc#1273029).
  • CVE-2026-64413: netfilter: ebtables: zero chainstack array (bsc#1274082).
  • CVE-2026-64435: audit: Fix data races of skb_queue_len() readers on audit_queue (bsc#1274080).
  • CVE-2026-64539: Bluetooth: eir: Fix stack OOB write when prepending the Flags AD (bsc#1273338).
  • CVE-2026-64546: drm/edid: fix OOB read in drm_parse_tiled_block() (bsc#1273334).
  • CVE-2026-64549: Bluetooth: bpa10x: avoid OOB read of revision string in bpa10x_setup() (bsc#1273341).
  • CVE-2026-72250: netfilter: nf_conntrack_reasm: guard mac_header adjustment after IPv6 defrag (bsc#1277663).
  • CVE-2026-72310: smb: client: fix overflow in passthrough ioctl bounds check (bsc#1277750).
  • CVE-2026-72416: netfilter: nft_compat: ebtables emulation must reject non-bridge targets (bsc#1278041).
  • CVE-2026-72428: bpf: Fix stack slot index in nospec checks (bsc#1278050).
  • CVE-2026-74620: net/sched: act_gact, act_police: range check the fallback control action (bsc#1277044).
  • CVE-2026-74683: Input: evdev - sanitize event type index when fetching event masks (bsc#1277387).
  • CVE-2026-74720: bpf: Preserve pointer state for commuted arithmetic (bsc#1276574).
  • CVE-2026-74748: netfilter: ipset: fix refcount race between list:set GC and swap (bsc#1277578).
  • CVE-2026-80572: Input: byd - synchronize timer deletion before freeing private data (bsc#1277338).
  • CVE-2026-80579: fbdev: clear fb_info->mode before deleting a videomode (bsc#1277260).
  • CVE-2026-80637: netfilter: synproxy: fix unaligned memory access in timestamp adjustment (bsc#1278343).
  • CVE-2026-80704: drm/amd/display: use proper context for logging (bsc#1278431).
  • CVE-2026-80717: sctp: validate Adaptation Indication parameter length (bsc#1277836).
  • CVE-2026-80764: Bluetooth: hci_event: fix LE list UAF on reset (bsc#1279493).
  • CVE-2026-80808: ext4: stop retrying saturated xattr cache entries (bsc#1279795).
  • CVE-2026-80809: ocfs2: fix missing metadata reservation for large xattrs (bsc#1279606).
  • CVE-2026-80879: ocfs2: fix circular locking dependency in ocfs2_dio_end_io_write (bsc#1279494).
  • CVE-2026-80881: ocfs2: fix buffer head management in ocfs2_read_blocks() (bsc#1279496).
  • CVE-2026-80888: drm/vmwgfx: drop dma_buf reference on foreign-fd prime import (bsc#1279455).
  • CVE-2026-80978: net: cap advertised IP tunnel headroom (bsc#1280253).
  • CVE-2026-80989: net: thunderbolt: Mark the connection down when bringing it up fails (bsc#1280305).
  • CVE-2026-89494: ocfs2: validate lengths in dlm_mig_lockres_handler (bsc#1280520).
  • CVE-2026-89495: ocfs2: bound namelen in dlm_migrate_request_handler (bsc#1280569).
  • CVE-2026-89537: SUNRPC: Reject short RFC 4121 MIC tokens in gss_krb5_verify_mic_v2 (bsc#1280713).
  • CVE-2026-89559: libnvdimm/labels: Prevent integer overflow in __nd_label_validate() (bsc#1280554).
  • CVE-2026-89606: ecryptfs: reject too-small tag 70 packets (bsc#1280469).
  • CVE-2026-89607: ecryptfs: reject oversized encrypted_key_size in parse_tag_3_packet (bsc#1281792).
  • CVE-2026-89608: ecryptfs: pass packet set buffer size to parser (bsc#1280826).
  • CVE-2026-89631: smb: client: reject a tree connect response whose byte count is too small (bsc#1280496).
  • CVE-2026-89636: smb: client: clear ce->tgthint in free_tgts() (bsc#1281042).
  • CVE-2026-89638: smb: client: clear…
Record
SUSE-SU-2026:5121-1
Updated
2026-11-06
OSVUSN-8781-1 No score

linux-nvidia-tegra vulnerabilities

It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permission to do so had been revoked, bypassing memory protections or escalating privileges. (CVE-2025-10263)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • User-space API (UAPI);
  • Kernel build system;
  • ARM32 architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Cryptographic API;
  • Intel NPU Driver;
  • Compute Acceleration Framework;
  • ACPI drivers;
  • Drivers core;
  • DRBD Distributed Replicated Block Device drivers;
  • Rados block device (RBD) driver;
  • Ublk userspace block driver;
  • Compressed RAM block device driver;
  • Bluetooth drivers;
  • Hardware crypto device drivers;
  • CXL (Compute Express Link) drivers;
  • Arm Firmware Framework for ARMv8-A(FFA);
  • EFI core;
  • FPGA Framework;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • I2C subsystem;
  • I3C subsystem;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Mouse) drivers;
  • IOMMU subsystem;
  • Multiple devices driver;
  • Media drivers;
  • Fastrpc Driver;
  • Network drivers;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • MediaTek network drivers;
  • NVME drivers;
  • Operating Performance Points (OPP) driver;
  • PCI subsystem;
  • PTP clock framework;
  • RPMSG subsystem;
  • SCSI subsystem;
  • SoundWire subsystem;
  • SPI subsystem;
  • Greybus lights staging drivers;
  • Media staging drivers;
  • NVIDIA Tegra embedded controller (NVEC) staging driver;
  • Realtek RTL8723BS SDIO drivers;
  • TCM subsystem;
  • Trusted Execution Environment drivers;
  • Thunderbolt and USB4 drivers;
  • TTY drivers;
  • USB Gadget drivers;
  • USB Dual Role (OTG-ready) Controller drivers;
  • USB Serial drivers;
  • vDPA drivers;
  • VFIO drivers;
  • Virtio Host (VHOST) subsystem;
  • Virtio drivers;
  • Xen hypervisor drivers;
  • 9P distributed file system;
  • AFS file system;
  • File systems infrastructure;
  • BTRFS file system;
  • Ceph distributed file system;
  • exFAT file system;
  • F2FS file system;
  • GFS2 file system;
  • HFS file system;
  • HFS+ file system;
  • JFS file system;
  • Network file systems library;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • NTFS3 file system;
  • OCFS2 file system;
  • OrangeFS file system;
  • SMB network file system;
  • BPF subsystem;
  • File system encryption (fscrypt);
  • Software nodes and device properties;
  • IPv4 networking;
  • KVM subsystem;
  • Mellanox drivers;
  • Memory management;
  • Networking core;
  • Netfilter;
  • Socket messages infrastructure;
  • MediaTek SoC drivers;
  • Sun RPC protocol;
  • Network traffic control;
  • IPv6 networking;
  • Amateur Radio drivers;
  • Bluetooth subsystem;
  • IP tunnels definitions;
  • KCM (Kernel Connection Multiplexor) sockets driver;
  • MultiProtocol Label Switching driver;
  • TCP network protocol;
  • XFRM subsystem;
  • Tracing infrastructure;
  • io_uring subsystem;
  • Control group (cgroup);
  • Perf events;
  • IRQ subsystem;
  • Locking primitives;
  • KProbes tracing;
  • 9P file system network protocol;
  • B.A.T.M.A.N. meshing protocol;
  • Ethernet bridge;
  • CAN network layer;
  • Ceph Core library;
  • Handshake API;
  • HSR network protocol;
  • IFE protocol;
  • L2TP protocol;
  • MAC80211 subsystem;
  • IEEE 802.15.4 subsystem;
  • Multipath TCP;
  • NFC subsystem;
  • Open vSwitch;
  • Phonet protocol;
  • RDS protocol;
  • RxRPC session sockets;
  • SCTP protocol;
  • SMC…
Record
USN-8781-1
Updated
2026-11-09
OSVUSN-8875-1 No score

linux, linux-aws, linux-aws-5.15, linux-aws-fips, linux-azure, linux-azure-5.15, linux-azure-fde-5.15, linux-azure-fips, linux-fips, linux-gke, linux-gkeop, linux-hwe-5.15, linux-ibm, linux-ibm-5.15, linux-intel-iot-realtime, linux-intel-iotg, linux-intel-iotg-5.15, linux-kvm, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-oracle, linux-realtime, linux-xilinx-zynqmp vulnerabilities

It was discovered that the i.MX clock driver in the Linux kernel did not properly handle certain memory allocation failure conditions, leading to a null pointer dereference vulnerability. A local attacker could possibly use this to cause a denial of service (system crash). (CVE-2022-3114)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • User-space API (UAPI);
  • ARM32 architecture;
  • ARM64 architecture;
  • MIPS architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • ACPI drivers;
  • Android drivers;
  • Serial ATA and Parallel ATA drivers;
  • Drivers core;
  • DRBD Distributed Replicated Block Device drivers;
  • Rados block device (RBD) driver;
  • Bluetooth drivers;
  • Cdrom driver;
  • Character device driver;
  • Hardware random number generator core;
  • TPM device driver;
  • Data acquisition framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • DAX dirext access to differentiated memory framework;
  • DMA engine subsystem;
  • FireWire subsystem;
  • Arm Firmware Framework for ARMv8-A(FFA);
  • ARM SCMI message protocol;
  • Intel Stratix 10 firmware drivers;
  • FPGA Framework;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • Intel Trace Hub HW tracing drivers;
  • I2C subsystem;
  • IIO subsystem;
  • IIO ADC drivers;
  • IIO Magnetometer sensors drivers;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Miscellaneous) drivers;
  • Input Device (Mouse) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • LED subsystem;
  • Multiple devices driver;
  • Media drivers;
  • MemoryStick subsystem;
  • Multifunction device drivers;
  • Fastrpc Driver;
  • MMC subsystem;
  • MTD block device drivers;
  • Ethernet bonding driver;
  • Network drivers;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • Texas Instruments network drivers;
  • MediaTek network drivers;
  • NTB driver;
  • NVDIMM (Non-Volatile Memory Device) drivers;
  • NVME drivers;
  • Parport drivers;
  • PCI subsystem;
  • Pin controllers subsystem;
  • Generic PM domains;
  • System reset/shutdown drivers;
  • Power supply drivers;
  • RapidIO drivers;
  • Voltage and Current Regulator drivers;
  • Reset controller framework;
  • S/390 drivers;
  • SCSI subsystem;
  • SLIMbus drivers;
  • SPI subsystem;
  • Media staging drivers;
  • Media Oriented Systems Transport (MOST) driver;
  • NVIDIA Tegra embedded controller (NVEC) staging driver;
  • Realtek RTL8723BS SDIO drivers;
  • TCM subsystem;
  • Trusted Execution Environment drivers;
  • Thermal drivers;
  • Thunderbolt and USB4 drivers;
  • TTY drivers;
  • USB DSL drivers;
  • Cadence USB3 driver;
  • USB Device Class drivers;
  • ULPI bus;
  • DesignWare USB2 driver;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • USB ChaosKey driver;
  • Siemens ID Mouse USB driver;
  • IOWarrior USB driver;
  • LD Didactic USB driver;
  • LEGO USB Tower driver;
  • USS720 USB parallel port adapter driver;
  • MediaTek USB3 DRD driver;
  • USB Serial drivers;
  • USB Type-C support driver;
  • USB Type-C Port Controller Manager driver;
  • USB Type-C Connector System Software Interface driver;
  • USB over IP driver;
  • vDPA drivers;
  • VFIO drivers;
  • Virtio Host (VHOST) subsystem;
  • Framebuffer layer;
  • Watchdog drivers;
  • Xen hypervisor drivers;
  • AFS file system;
  • File systems infrastructure;
  • BTRFS file system;
  • Ceph distributed file system;
  • EROFS file system;
  • exFAT file system;
  • Ext4 file system;
  • F2FS file system;
  • FUSE (File system in Userspace);
  • HFS file system;
  • HFS+ file system;
  • Journaling layer for block devices (JBD2); …
Record
USN-8875-1
Updated
2026-11-07
OSVUSN-8875-2 No score

linux-nvidia vulnerabilities

It was discovered that the i.MX clock driver in the Linux kernel did not properly handle certain memory allocation failure conditions, leading to a null pointer dereference vulnerability. A local attacker could possibly use this to cause a denial of service (system crash). (CVE-2022-3114)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • User-space API (UAPI);
  • ARM32 architecture;
  • ARM64 architecture;
  • MIPS architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • ACPI drivers;
  • Android drivers;
  • Serial ATA and Parallel ATA drivers;
  • Drivers core;
  • DRBD Distributed Replicated Block Device drivers;
  • Rados block device (RBD) driver;
  • Bluetooth drivers;
  • Cdrom driver;
  • Character device driver;
  • Hardware random number generator core;
  • TPM device driver;
  • Data acquisition framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • DAX dirext access to differentiated memory framework;
  • DMA engine subsystem;
  • FireWire subsystem;
  • Arm Firmware Framework for ARMv8-A(FFA);
  • ARM SCMI message protocol;
  • Intel Stratix 10 firmware drivers;
  • FPGA Framework;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • Intel Trace Hub HW tracing drivers;
  • I2C subsystem;
  • IIO subsystem;
  • IIO ADC drivers;
  • IIO Magnetometer sensors drivers;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Miscellaneous) drivers;
  • Input Device (Mouse) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • LED subsystem;
  • Multiple devices driver;
  • Media drivers;
  • MemoryStick subsystem;
  • Multifunction device drivers;
  • Fastrpc Driver;
  • MMC subsystem;
  • MTD block device drivers;
  • Ethernet bonding driver;
  • Network drivers;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • Texas Instruments network drivers;
  • MediaTek network drivers;
  • NTB driver;
  • NVDIMM (Non-Volatile Memory Device) drivers;
  • NVME drivers;
  • Parport drivers;
  • PCI subsystem;
  • Pin controllers subsystem;
  • Generic PM domains;
  • System reset/shutdown drivers;
  • Power supply drivers;
  • RapidIO drivers;
  • Voltage and Current Regulator drivers;
  • Reset controller framework;
  • S/390 drivers;
  • SCSI subsystem;
  • SLIMbus drivers;
  • SPI subsystem;
  • Media staging drivers;
  • Media Oriented Systems Transport (MOST) driver;
  • NVIDIA Tegra embedded controller (NVEC) staging driver;
  • Realtek RTL8723BS SDIO drivers;
  • TCM subsystem;
  • Trusted Execution Environment drivers;
  • Thermal drivers;
  • Thunderbolt and USB4 drivers;
  • TTY drivers;
  • USB DSL drivers;
  • Cadence USB3 driver;
  • USB Device Class drivers;
  • ULPI bus;
  • DesignWare USB2 driver;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • USB ChaosKey driver;
  • Siemens ID Mouse USB driver;
  • IOWarrior USB driver;
  • LD Didactic USB driver;
  • LEGO USB Tower driver;
  • USS720 USB parallel port adapter driver;
  • MediaTek USB3 DRD driver;
  • USB Serial drivers;
  • USB Type-C support driver;
  • USB Type-C Port Controller Manager driver;
  • USB Type-C Connector System Software Interface driver;
  • USB over IP driver;
  • vDPA drivers;
  • VFIO drivers;
  • Virtio Host (VHOST) subsystem;
  • Framebuffer layer;
  • Watchdog drivers;
  • Xen hypervisor drivers;
  • AFS file system;
  • File systems infrastructure;
  • BTRFS file system;
  • Ceph distributed file system;
  • EROFS file system;
  • exFAT file system;
  • Ext4 file system;
  • F2FS file system;
  • FUSE (File system in Userspace);
  • HFS file system;
  • HFS+ file system;
  • Journaling layer for block devices (JBD2); …
Record
USN-8875-2
Updated
2026-11-07
OSVUSN-8876-1 No score

linux-azure-fde vulnerabilities

It was discovered that the i.MX clock driver in the Linux kernel did not properly handle certain memory allocation failure conditions, leading to a null pointer dereference vulnerability. A local attacker could possibly use this to cause a denial of service (system crash). (CVE-2022-3114)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM32 architecture;
  • ARM64 architecture;
  • MIPS architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • ACPI drivers;
  • Android drivers;
  • Serial ATA and Parallel ATA drivers;
  • Drivers core;
  • DRBD Distributed Replicated Block Device drivers;
  • Rados block device (RBD) driver;
  • Bluetooth drivers;
  • Cdrom driver;
  • Character device driver;
  • Hardware random number generator core;
  • TPM device driver;
  • Data acquisition framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • DAX dirext access to differentiated memory framework;
  • DMA engine subsystem;
  • FireWire subsystem;
  • Arm Firmware Framework for ARMv8-A(FFA);
  • Intel Stratix 10 firmware drivers;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • Intel Trace Hub HW tracing drivers;
  • I2C subsystem;
  • IIO subsystem;
  • IIO ADC drivers;
  • IIO Magnetometer sensors drivers;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Miscellaneous) drivers;
  • Input Device (Mouse) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • LED subsystem;
  • Multiple devices driver;
  • Media drivers;
  • MemoryStick subsystem;
  • Multifunction device drivers;
  • Fastrpc Driver;
  • MTD block device drivers;
  • Network drivers;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • Texas Instruments network drivers;
  • MediaTek network drivers;
  • NTB driver;
  • NVDIMM (Non-Volatile Memory Device) drivers;
  • NVME drivers;
  • PCI subsystem;
  • Pin controllers subsystem;
  • Generic PM domains;
  • Power supply drivers;
  • Voltage and Current Regulator drivers;
  • Reset controller framework;
  • S/390 drivers;
  • SCSI subsystem;
  • SLIMbus drivers;
  • SPI subsystem;
  • Media staging drivers;
  • Media Oriented Systems Transport (MOST) driver;
  • NVIDIA Tegra embedded controller (NVEC) staging driver;
  • Realtek RTL8723BS SDIO drivers;
  • TCM subsystem;
  • Trusted Execution Environment drivers;
  • Thermal drivers;
  • Thunderbolt and USB4 drivers;
  • USB DSL drivers;
  • Cadence USB3 driver;
  • ULPI bus;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • USB ChaosKey driver;
  • Siemens ID Mouse USB driver;
  • IOWarrior USB driver;
  • LD Didactic USB driver;
  • LEGO USB Tower driver;
  • USS720 USB parallel port adapter driver;
  • MediaTek USB3 DRD driver;
  • USB Serial drivers;
  • USB Type-C Port Controller Manager driver;
  • USB Type-C Connector System Software Interface driver;
  • USB over IP driver;
  • vDPA drivers;
  • VFIO drivers;
  • Virtio Host (VHOST) subsystem;
  • Framebuffer layer;
  • Watchdog drivers;
  • Xen hypervisor drivers;
  • AFS file system;
  • File systems infrastructure;
  • BTRFS file system;
  • Ceph distributed file system;
  • EROFS file system;
  • exFAT file system;
  • Ext4 file system;
  • F2FS file system;
  • FUSE (File system in Userspace);
  • HFS file system;
  • HFS+ file system;
  • Journaling layer for block devices (JBD2);
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • NTFS3 file system;
  • OCFS2 file system;
  • OrangeFS file system;
  • Proc file system;
  • SMB network file system;
  • UDF file system;
  • XFS file system;
  • Software nodes and device…
Record
USN-8876-1
Updated
2026-11-07
OSVUSN-8877-1 No score

linux-gcp, linux-gcp-fips vulnerabilities

It was discovered that the i.MX clock driver in the Linux kernel did not properly handle certain memory allocation failure conditions, leading to a null pointer dereference vulnerability. A local attacker could possibly use this to cause a denial of service (system crash). (CVE-2022-3114)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • User-space API (UAPI);
  • ARM32 architecture;
  • ARM64 architecture;
  • MIPS architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • ACPI drivers;
  • Android drivers;
  • Serial ATA and Parallel ATA drivers;
  • Drivers core;
  • DRBD Distributed Replicated Block Device drivers;
  • Rados block device (RBD) driver;
  • Bluetooth drivers;
  • Cdrom driver;
  • Character device driver;
  • Hardware random number generator core;
  • TPM device driver;
  • Data acquisition framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • DAX dirext access to differentiated memory framework;
  • DMA engine subsystem;
  • FireWire subsystem;
  • Arm Firmware Framework for ARMv8-A(FFA);
  • ARM SCMI message protocol;
  • Intel Stratix 10 firmware drivers;
  • FPGA Framework;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • Intel Trace Hub HW tracing drivers;
  • I2C subsystem;
  • IIO subsystem;
  • IIO ADC drivers;
  • IIO Magnetometer sensors drivers;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Miscellaneous) drivers;
  • Input Device (Mouse) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • LED subsystem;
  • Multiple devices driver;
  • Media drivers;
  • MemoryStick subsystem;
  • Multifunction device drivers;
  • Fastrpc Driver;
  • MMC subsystem;
  • MTD block device drivers;
  • Ethernet bonding driver;
  • Network drivers;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • Texas Instruments network drivers;
  • MediaTek network drivers;
  • NTB driver;
  • NVDIMM (Non-Volatile Memory Device) drivers;
  • NVME drivers;
  • Parport drivers;
  • PCI subsystem;
  • Pin controllers subsystem;
  • Generic PM domains;
  • System reset/shutdown drivers;
  • Power supply drivers;
  • RapidIO drivers;
  • Voltage and Current Regulator drivers;
  • Reset controller framework;
  • S/390 drivers;
  • SCSI subsystem;
  • SLIMbus drivers;
  • SPI subsystem;
  • Media staging drivers;
  • Media Oriented Systems Transport (MOST) driver;
  • NVIDIA Tegra embedded controller (NVEC) staging driver;
  • Realtek RTL8723BS SDIO drivers;
  • TCM subsystem;
  • Trusted Execution Environment drivers;
  • Thermal drivers;
  • Thunderbolt and USB4 drivers;
  • TTY drivers;
  • USB DSL drivers;
  • Cadence USB3 driver;
  • USB Device Class drivers;
  • ULPI bus;
  • DesignWare USB2 driver;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • USB ChaosKey driver;
  • Siemens ID Mouse USB driver;
  • IOWarrior USB driver;
  • LD Didactic USB driver;
  • LEGO USB Tower driver;
  • USS720 USB parallel port adapter driver;
  • MediaTek USB3 DRD driver;
  • USB Serial drivers;
  • USB Type-C support driver;
  • USB Type-C Port Controller Manager driver;
  • USB Type-C Connector System Software Interface driver;
  • USB over IP driver;
  • vDPA drivers;
  • VFIO drivers;
  • Virtio Host (VHOST) subsystem;
  • Framebuffer layer;
  • Watchdog drivers;
  • Xen hypervisor drivers;
  • AFS file system;
  • File systems infrastructure;
  • BTRFS file system;
  • Ceph distributed file system;
  • EROFS file system;
  • exFAT file system;
  • Ext4 file system;
  • F2FS file system;
  • FUSE (File system in Userspace);
  • HFS file system;
  • HFS+ file system;
  • Journaling layer for block devices (JBD2); …
Record
USN-8877-1
Updated
2026-11-07
OSVUSN-8878-1 No score

linux-gcp-5.15 vulnerabilities

It was discovered that the i.MX clock driver in the Linux kernel did not properly handle certain memory allocation failure conditions, leading to a null pointer dereference vulnerability. A local attacker could possibly use this to cause a denial of service (system crash). (CVE-2022-3114)

It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permission to do so had been revoked, bypassing memory protections or escalating privileges. (CVE-2025-10263)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • User-space API (UAPI);
  • ARM32 architecture;
  • MIPS architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • ACPI drivers;
  • Android drivers;
  • Serial ATA and Parallel ATA drivers;
  • Drivers core;
  • DRBD Distributed Replicated Block Device drivers;
  • Rados block device (RBD) driver;
  • Bluetooth drivers;
  • Cdrom driver;
  • Character device driver;
  • Hardware random number generator core;
  • TPM device driver;
  • Data acquisition framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • DAX dirext access to differentiated memory framework;
  • DMA engine subsystem;
  • FireWire subsystem;
  • Arm Firmware Framework for ARMv8-A(FFA);
  • ARM SCMI message protocol;
  • Intel Stratix 10 firmware drivers;
  • FPGA Framework;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • Intel Trace Hub HW tracing drivers;
  • I2C subsystem;
  • IIO subsystem;
  • IIO ADC drivers;
  • IIO Magnetometer sensors drivers;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Miscellaneous) drivers;
  • Input Device (Mouse) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • LED subsystem;
  • Multiple devices driver;
  • Media drivers;
  • MemoryStick subsystem;
  • Multifunction device drivers;
  • Fastrpc Driver;
  • MMC subsystem;
  • MTD block device drivers;
  • Ethernet bonding driver;
  • Network drivers;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • Texas Instruments network drivers;
  • MediaTek network drivers;
  • NTB driver;
  • NVDIMM (Non-Volatile Memory Device) drivers;
  • NVME drivers;
  • Parport drivers;
  • PCI subsystem;
  • Pin controllers subsystem;
  • Generic PM domains;
  • System reset/shutdown drivers;
  • Power supply drivers;
  • RapidIO drivers;
  • Voltage and Current Regulator drivers;
  • Reset controller framework;
  • S/390 drivers;
  • SCSI subsystem;
  • SLIMbus drivers;
  • SPI subsystem;
  • Media staging drivers;
  • Media Oriented Systems Transport (MOST) driver;
  • NVIDIA Tegra embedded controller (NVEC) staging driver;
  • Realtek RTL8723BS SDIO drivers;
  • TCM subsystem;
  • Trusted Execution Environment drivers;
  • Thermal drivers;
  • Thunderbolt and USB4 drivers;
  • TTY drivers;
  • USB DSL drivers;
  • Cadence USB3 driver;
  • USB Device Class drivers;
  • ULPI bus;
  • DesignWare USB2 driver;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • USB ChaosKey driver;
  • Siemens ID Mouse USB driver;
  • IOWarrior USB driver;
  • LD Didactic USB driver;
  • LEGO USB Tower driver;
  • USS720 USB parallel port adapter driver;
  • MediaTek USB3 DRD driver;
  • USB Serial drivers;
  • USB Type-C support driver;
  • USB Type-C Port Controller Manager driver;
  • USB Type-C Connector System Software Interface driver;
  • USB over IP driver;
  • vDPA drivers;
  • VFIO drivers;
  • Virtio Host (VHOST) subsystem;
  • Framebuffer…
Record
USN-8878-1
Updated
2026-11-07
OSVUSN-8879-1 No score

linux-oracle-5.15 vulnerabilities

It was discovered that the i.MX clock driver in the Linux kernel did not properly handle certain memory allocation failure conditions, leading to a null pointer dereference vulnerability. A local attacker could possibly use this to cause a denial of service (system crash). (CVE-2022-3114)

It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permission to do so had been revoked, bypassing memory protections or escalating privileges. (CVE-2025-10263)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • User-space API (UAPI);
  • ARM32 architecture;
  • MIPS architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • ACPI drivers;
  • Android drivers;
  • Serial ATA and Parallel ATA drivers;
  • Drivers core;
  • DRBD Distributed Replicated Block Device drivers;
  • Rados block device (RBD) driver;
  • Bluetooth drivers;
  • Cdrom driver;
  • Character device driver;
  • Hardware random number generator core;
  • TPM device driver;
  • Data acquisition framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • DAX dirext access to differentiated memory framework;
  • DMA engine subsystem;
  • FireWire subsystem;
  • Arm Firmware Framework for ARMv8-A(FFA);
  • ARM SCMI message protocol;
  • Intel Stratix 10 firmware drivers;
  • FPGA Framework;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • Intel Trace Hub HW tracing drivers;
  • I2C subsystem;
  • IIO subsystem;
  • IIO ADC drivers;
  • IIO Magnetometer sensors drivers;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Miscellaneous) drivers;
  • Input Device (Mouse) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • LED subsystem;
  • Multiple devices driver;
  • Media drivers;
  • MemoryStick subsystem;
  • Multifunction device drivers;
  • Fastrpc Driver;
  • MMC subsystem;
  • MTD block device drivers;
  • Ethernet bonding driver;
  • Network drivers;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • Texas Instruments network drivers;
  • MediaTek network drivers;
  • NTB driver;
  • NVDIMM (Non-Volatile Memory Device) drivers;
  • NVME drivers;
  • Parport drivers;
  • PCI subsystem;
  • Pin controllers subsystem;
  • Generic PM domains;
  • System reset/shutdown drivers;
  • Power supply drivers;
  • RapidIO drivers;
  • Voltage and Current Regulator drivers;
  • Reset controller framework;
  • S/390 drivers;
  • SCSI subsystem;
  • SLIMbus drivers;
  • SPI subsystem;
  • Media staging drivers;
  • Media Oriented Systems Transport (MOST) driver;
  • NVIDIA Tegra embedded controller (NVEC) staging driver;
  • Realtek RTL8723BS SDIO drivers;
  • TCM subsystem;
  • Trusted Execution Environment drivers;
  • Thermal drivers;
  • Thunderbolt and USB4 drivers;
  • TTY drivers;
  • USB DSL drivers;
  • Cadence USB3 driver;
  • USB Device Class drivers;
  • ULPI bus;
  • DesignWare USB2 driver;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • USB ChaosKey driver;
  • Siemens ID Mouse USB driver;
  • IOWarrior USB driver;
  • LD Didactic USB driver;
  • LEGO USB Tower driver;
  • USS720 USB parallel port adapter driver;
  • MediaTek USB3 DRD driver;
  • USB Serial drivers;
  • USB Type-C support driver;
  • USB Type-C Port Controller Manager driver;
  • USB Type-C Connector System Software Interface driver;
  • USB over IP driver;
  • vDPA drivers;
  • VFIO drivers;
  • Virtio Host (VHOST) subsystem;
  • Framebuffer…
Record
USN-8879-1
Updated
2026-11-07
OSVUSN-8887-1 No score

linux, linux-aws, linux-gcp, linux-gke, linux-ibm, linux-oracle, linux-realtime vulnerabilities

It was discovered that some AMD processors did not properly perform Reverse Map Table (RMP) checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an out-of-bounds condition and compromise the integrity of SEV-SNP guest memory. (CVE-2023-20585)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • NVDIMM (Non-Volatile Memory Device) drivers;
  • Handshake API;
  • ARM32 architecture;
  • MIPS architecture;
  • OpenRISC architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • x86 architecture;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • Intel NPU Driver;
  • ACPI drivers;
  • Android drivers;
  • Serial ATA and Parallel ATA drivers;
  • Drivers core;
  • Rados block device (RBD) driver;
  • Ublk userspace block driver;
  • Bluetooth drivers;
  • Cdrom driver;
  • Character device driver;
  • TPM device driver;
  • Data acquisition framework and drivers;
  • Hardware crypto device drivers;
  • CXL (Compute Express Link) drivers;
  • DAX dirext access to differentiated memory framework;
  • DIBS (Direct Internal Buffer Sharing) drivers;
  • Buffer Sharing and Synchronization framework;
  • DMA engine subsystem;
  • DPLL subsystem;
  • EDAC drivers;
  • FireWire subsystem;
  • Arm Firmware Framework for ARMv8-A(FFA);
  • ARM SCMI message protocol;
  • Intel Stratix 10 firmware drivers;
  • FPGA Framework;
  • GPIB drivers;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • Microsoft Hyper-V drivers;
  • Hardware monitoring drivers;
  • CoreSight HW tracing drivers;
  • Intel Trace Hub HW tracing drivers;
  • I2C subsystem;
  • I3C subsystem;
  • IIO subsystem;
  • IIO ADC drivers;
  • IIO Magnetometer sensors drivers;
  • InfiniBand drivers;
  • Input Device (Miscellaneous) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • LED subsystem;
  • Mailbox framework;
  • Multiple devices driver;
  • Media drivers;
  • MemoryStick subsystem;
  • Multifunction device drivers;
  • Intel Management Engine Interface driver;
  • Amazon Nitro Secure Module driver;
  • MMC subsystem;
  • MTD block device drivers;
  • Network drivers;
  • Ethernet bonding driver;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • Texas Instruments network drivers;
  • MediaTek network drivers;
  • NTB driver;
  • NVME drivers;
  • Device tree and open firmware driver;
  • Operating Performance Points (OPP) driver;
  • PCI subsystem;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • i.MX PM domains;
  • MediaTek PM domains;
  • Power supply drivers;
  • PTP clock framework;
  • RapidIO drivers;
  • Voltage and Current Regulator drivers;
  • Remote Processor subsystem;
  • MPAM driver;
  • Reset controller framework;
  • Real Time Clock drivers;
  • S/390 drivers;
  • SCSI subsystem;
  • Xilinx SoC drivers;
  • SoundWire subsystem;
  • SPI subsystem;
  • Media staging drivers;
  • Media Oriented Systems Transport (MOST) driver;
  • NVIDIA Tegra embedded controller (NVEC) staging driver;
  • Realtek RTL8723BS SDIO drivers;
  • TTY drivers;
  • UFS subsystem;
  • USB DSL drivers;
  • USB core drivers;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • USB Dual Role (OTG-ready) Controller drivers;
  • USB Serial drivers;
  • vDPA drivers;
  • VFIO drivers;
  • Virtio Host (VHOST) subsystem;
  • Framebuffer layer;
  • Virtio drivers;
  • Watchdog drivers;
  • Xen hypervisor drivers;
  • 9P distributed file system;
  • AFS file system;
  • File systems infrastructure;
  • BTRFS file system;
  • Ceph distributed file system;
  • Ext4 file system;
  • F2FS file system;
  • FUSE (File system in Userspace);
  • Journaling layer for block devices (JBD2);
  • Network file systems library;
  • Network…
Record
USN-8887-1
Updated
2026-11-09
OSVUSN-8887-2 No score

linux-aws-7.0 vulnerabilities

It was discovered that some AMD processors did not properly perform Reverse Map Table (RMP) checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an out-of-bounds condition and compromise the integrity of SEV-SNP guest memory. (CVE-2023-20585)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • NVDIMM (Non-Volatile Memory Device) drivers;
  • Handshake API;
  • ARM32 architecture;
  • MIPS architecture;
  • OpenRISC architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • x86 architecture;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • Intel NPU Driver;
  • ACPI drivers;
  • Android drivers;
  • Serial ATA and Parallel ATA drivers;
  • Drivers core;
  • Rados block device (RBD) driver;
  • Ublk userspace block driver;
  • Bluetooth drivers;
  • Cdrom driver;
  • Character device driver;
  • TPM device driver;
  • Data acquisition framework and drivers;
  • Hardware crypto device drivers;
  • CXL (Compute Express Link) drivers;
  • DAX dirext access to differentiated memory framework;
  • DIBS (Direct Internal Buffer Sharing) drivers;
  • Buffer Sharing and Synchronization framework;
  • DMA engine subsystem;
  • DPLL subsystem;
  • EDAC drivers;
  • FireWire subsystem;
  • Arm Firmware Framework for ARMv8-A(FFA);
  • ARM SCMI message protocol;
  • Intel Stratix 10 firmware drivers;
  • FPGA Framework;
  • GPIB drivers;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • Microsoft Hyper-V drivers;
  • Hardware monitoring drivers;
  • CoreSight HW tracing drivers;
  • Intel Trace Hub HW tracing drivers;
  • I2C subsystem;
  • I3C subsystem;
  • IIO subsystem;
  • IIO ADC drivers;
  • IIO Magnetometer sensors drivers;
  • InfiniBand drivers;
  • Input Device (Miscellaneous) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • LED subsystem;
  • Mailbox framework;
  • Multiple devices driver;
  • Media drivers;
  • MemoryStick subsystem;
  • Multifunction device drivers;
  • Intel Management Engine Interface driver;
  • Amazon Nitro Secure Module driver;
  • MMC subsystem;
  • MTD block device drivers;
  • Network drivers;
  • Ethernet bonding driver;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • Texas Instruments network drivers;
  • MediaTek network drivers;
  • NTB driver;
  • NVME drivers;
  • Device tree and open firmware driver;
  • Operating Performance Points (OPP) driver;
  • PCI subsystem;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • i.MX PM domains;
  • MediaTek PM domains;
  • Power supply drivers;
  • PTP clock framework;
  • RapidIO drivers;
  • Voltage and Current Regulator drivers;
  • Remote Processor subsystem;
  • MPAM driver;
  • Reset controller framework;
  • Real Time Clock drivers;
  • S/390 drivers;
  • SCSI subsystem;
  • Xilinx SoC drivers;
  • SoundWire subsystem;
  • SPI subsystem;
  • Media staging drivers;
  • Media Oriented Systems Transport (MOST) driver;
  • NVIDIA Tegra embedded controller (NVEC) staging driver;
  • Realtek RTL8723BS SDIO drivers;
  • TTY drivers;
  • UFS subsystem;
  • USB DSL drivers;
  • USB core drivers;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • USB Dual Role (OTG-ready) Controller drivers;
  • USB Serial drivers;
  • vDPA drivers;
  • VFIO drivers;
  • Virtio Host (VHOST) subsystem;
  • Framebuffer layer;
  • Virtio drivers;
  • Watchdog drivers;
  • Xen hypervisor drivers;
  • 9P distributed file system;
  • AFS file system;
  • File systems infrastructure;
  • BTRFS file system;
  • Ceph distributed file system;
  • Ext4 file system;
  • F2FS file system;
  • FUSE (File system in Userspace);
  • Journaling layer for block devices (JBD2);
  • Network file systems library;
  • Network…
Record
USN-8887-2
Updated
2026-11-09
OSVUSN-8887-3 No score

linux-gcp-7.0, linux-hwe-7.0, linux-oracle-7.0 vulnerabilities

It was discovered that some AMD processors did not properly perform Reverse Map Table (RMP) checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an out-of-bounds condition and compromise the integrity of SEV-SNP guest memory. (CVE-2023-20585)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • NVDIMM (Non-Volatile Memory Device) drivers;
  • Handshake API;
  • ARM32 architecture;
  • MIPS architecture;
  • OpenRISC architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • x86 architecture;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • Intel NPU Driver;
  • ACPI drivers;
  • Android drivers;
  • Serial ATA and Parallel ATA drivers;
  • Drivers core;
  • Rados block device (RBD) driver;
  • Ublk userspace block driver;
  • Bluetooth drivers;
  • Cdrom driver;
  • Character device driver;
  • TPM device driver;
  • Data acquisition framework and drivers;
  • Hardware crypto device drivers;
  • CXL (Compute Express Link) drivers;
  • DAX dirext access to differentiated memory framework;
  • DIBS (Direct Internal Buffer Sharing) drivers;
  • Buffer Sharing and Synchronization framework;
  • DMA engine subsystem;
  • DPLL subsystem;
  • EDAC drivers;
  • FireWire subsystem;
  • Arm Firmware Framework for ARMv8-A(FFA);
  • ARM SCMI message protocol;
  • Intel Stratix 10 firmware drivers;
  • FPGA Framework;
  • GPIB drivers;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • Microsoft Hyper-V drivers;
  • Hardware monitoring drivers;
  • CoreSight HW tracing drivers;
  • Intel Trace Hub HW tracing drivers;
  • I2C subsystem;
  • I3C subsystem;
  • IIO subsystem;
  • IIO ADC drivers;
  • IIO Magnetometer sensors drivers;
  • InfiniBand drivers;
  • Input Device (Miscellaneous) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • LED subsystem;
  • Mailbox framework;
  • Multiple devices driver;
  • Media drivers;
  • MemoryStick subsystem;
  • Multifunction device drivers;
  • Intel Management Engine Interface driver;
  • Amazon Nitro Secure Module driver;
  • MMC subsystem;
  • MTD block device drivers;
  • Network drivers;
  • Ethernet bonding driver;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • Texas Instruments network drivers;
  • MediaTek network drivers;
  • NTB driver;
  • NVME drivers;
  • Device tree and open firmware driver;
  • Operating Performance Points (OPP) driver;
  • PCI subsystem;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • i.MX PM domains;
  • MediaTek PM domains;
  • Power supply drivers;
  • PTP clock framework;
  • RapidIO drivers;
  • Voltage and Current Regulator drivers;
  • Remote Processor subsystem;
  • MPAM driver;
  • Reset controller framework;
  • Real Time Clock drivers;
  • S/390 drivers;
  • SCSI subsystem;
  • Xilinx SoC drivers;
  • SoundWire subsystem;
  • SPI subsystem;
  • Media staging drivers;
  • Media Oriented Systems Transport (MOST) driver;
  • NVIDIA Tegra embedded controller (NVEC) staging driver;
  • Realtek RTL8723BS SDIO drivers;
  • TTY drivers;
  • UFS subsystem;
  • USB DSL drivers;
  • USB core drivers;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • USB Dual Role (OTG-ready) Controller drivers;
  • USB Serial drivers;
  • vDPA drivers;
  • VFIO drivers;
  • Virtio Host (VHOST) subsystem;
  • Framebuffer layer;
  • Virtio drivers;
  • Watchdog drivers;
  • Xen hypervisor drivers;
  • 9P distributed file system;
  • AFS file system;
  • File systems infrastructure;
  • BTRFS file system;
  • Ceph distributed file system;
  • Ext4 file system;
  • F2FS file system;
  • FUSE (File system in Userspace);
  • Journaling layer for block devices (JBD2);
  • Network file systems library;
  • Network…
Record
USN-8887-3
Updated
2026-11-09
OSVUSN-8888-1 No score

linux-azure, linux-azure-fde vulnerabilities

It was discovered that some AMD processors did not properly perform Reverse Map Table (RMP) checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an out-of-bounds condition and compromise the integrity of SEV-SNP guest memory. (CVE-2023-20585)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • NVDIMM (Non-Volatile Memory Device) drivers;
  • Handshake API;
  • ARM32 architecture;
  • MIPS architecture;
  • OpenRISC architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • x86 architecture;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • Intel NPU Driver;
  • ACPI drivers;
  • Android drivers;
  • Serial ATA and Parallel ATA drivers;
  • Drivers core;
  • DRBD Distributed Replicated Block Device drivers;
  • Rados block device (RBD) driver;
  • Ublk userspace block driver;
  • Bluetooth drivers;
  • Cdrom driver;
  • Character device driver;
  • TPM device driver;
  • Data acquisition framework and drivers;
  • Hardware crypto device drivers;
  • CXL (Compute Express Link) drivers;
  • DAX dirext access to differentiated memory framework;
  • DIBS (Direct Internal Buffer Sharing) drivers;
  • Buffer Sharing and Synchronization framework;
  • DMA engine subsystem;
  • DPLL subsystem;
  • EDAC drivers;
  • FireWire subsystem;
  • Arm Firmware Framework for ARMv8-A(FFA);
  • ARM SCMI message protocol;
  • Intel Stratix 10 firmware drivers;
  • FPGA Framework;
  • GPIB drivers;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • Microsoft Hyper-V drivers;
  • Hardware monitoring drivers;
  • CoreSight HW tracing drivers;
  • Intel Trace Hub HW tracing drivers;
  • I2C subsystem;
  • I3C subsystem;
  • IIO subsystem;
  • IIO ADC drivers;
  • IIO Magnetometer sensors drivers;
  • InfiniBand drivers;
  • Input Device (Miscellaneous) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • LED subsystem;
  • Mailbox framework;
  • Multiple devices driver;
  • Media drivers;
  • MemoryStick subsystem;
  • Multifunction device drivers;
  • Intel Management Engine Interface driver;
  • Amazon Nitro Secure Module driver;
  • MMC subsystem;
  • MTD block device drivers;
  • Network drivers;
  • Ethernet bonding driver;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • Texas Instruments network drivers;
  • MediaTek network drivers;
  • NTB driver;
  • NVME drivers;
  • Device tree and open firmware driver;
  • Operating Performance Points (OPP) driver;
  • PCI subsystem;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • i.MX PM domains;
  • MediaTek PM domains;
  • Power supply drivers;
  • PTP clock framework;
  • RapidIO drivers;
  • Voltage and Current Regulator drivers;
  • Remote Processor subsystem;
  • MPAM driver;
  • Reset controller framework;
  • Real Time Clock drivers;
  • S/390 drivers;
  • SCSI subsystem;
  • Xilinx SoC drivers;
  • SoundWire subsystem;
  • SPI subsystem;
  • Media staging drivers;
  • Media Oriented Systems Transport (MOST) driver;
  • NVIDIA Tegra embedded controller (NVEC) staging driver;
  • Realtek RTL8723BS SDIO drivers;
  • TCM subsystem;
  • TTY drivers;
  • UFS subsystem;
  • USB DSL drivers;
  • USB core drivers;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • USB Dual Role (OTG-ready) Controller drivers;
  • USB Serial drivers;
  • vDPA drivers;
  • VFIO drivers;
  • Virtio Host (VHOST) subsystem;
  • Framebuffer layer;
  • Virtio drivers;
  • Watchdog drivers;
  • Xen hypervisor drivers;
  • 9P distributed file system;
  • AFS file system;
  • File systems infrastructure;
  • BTRFS file system;
  • Ceph distributed file system;
  • Ext4 file system;
  • F2FS file system;
  • FUSE (File system in Userspace);
  • Journaling layer…
Record
USN-8888-1
Updated
2026-11-09
OSVUSN-8888-2 No score

linux-azure-7.0, linux-azure-fde-7.0 vulnerabilities

It was discovered that some AMD processors did not properly perform Reverse Map Table (RMP) checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an out-of-bounds condition and compromise the integrity of SEV-SNP guest memory. (CVE-2023-20585)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • NVDIMM (Non-Volatile Memory Device) drivers;
  • Handshake API;
  • ARM32 architecture;
  • MIPS architecture;
  • OpenRISC architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • x86 architecture;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • Intel NPU Driver;
  • ACPI drivers;
  • Android drivers;
  • Serial ATA and Parallel ATA drivers;
  • Drivers core;
  • DRBD Distributed Replicated Block Device drivers;
  • Rados block device (RBD) driver;
  • Ublk userspace block driver;
  • Bluetooth drivers;
  • Cdrom driver;
  • Character device driver;
  • TPM device driver;
  • Data acquisition framework and drivers;
  • Hardware crypto device drivers;
  • CXL (Compute Express Link) drivers;
  • DAX dirext access to differentiated memory framework;
  • DIBS (Direct Internal Buffer Sharing) drivers;
  • Buffer Sharing and Synchronization framework;
  • DMA engine subsystem;
  • DPLL subsystem;
  • EDAC drivers;
  • FireWire subsystem;
  • Arm Firmware Framework for ARMv8-A(FFA);
  • ARM SCMI message protocol;
  • Intel Stratix 10 firmware drivers;
  • FPGA Framework;
  • GPIB drivers;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • Microsoft Hyper-V drivers;
  • Hardware monitoring drivers;
  • CoreSight HW tracing drivers;
  • Intel Trace Hub HW tracing drivers;
  • I2C subsystem;
  • I3C subsystem;
  • IIO subsystem;
  • IIO ADC drivers;
  • IIO Magnetometer sensors drivers;
  • InfiniBand drivers;
  • Input Device (Miscellaneous) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • LED subsystem;
  • Mailbox framework;
  • Multiple devices driver;
  • Media drivers;
  • MemoryStick subsystem;
  • Multifunction device drivers;
  • Intel Management Engine Interface driver;
  • Amazon Nitro Secure Module driver;
  • MMC subsystem;
  • MTD block device drivers;
  • Network drivers;
  • Ethernet bonding driver;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • Texas Instruments network drivers;
  • MediaTek network drivers;
  • NTB driver;
  • NVME drivers;
  • Device tree and open firmware driver;
  • Operating Performance Points (OPP) driver;
  • PCI subsystem;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • i.MX PM domains;
  • MediaTek PM domains;
  • Power supply drivers;
  • PTP clock framework;
  • RapidIO drivers;
  • Voltage and Current Regulator drivers;
  • Remote Processor subsystem;
  • MPAM driver;
  • Reset controller framework;
  • Real Time Clock drivers;
  • S/390 drivers;
  • SCSI subsystem;
  • Xilinx SoC drivers;
  • SoundWire subsystem;
  • SPI subsystem;
  • Media staging drivers;
  • Media Oriented Systems Transport (MOST) driver;
  • NVIDIA Tegra embedded controller (NVEC) staging driver;
  • Realtek RTL8723BS SDIO drivers;
  • TCM subsystem;
  • TTY drivers;
  • UFS subsystem;
  • USB DSL drivers;
  • USB core drivers;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • USB Dual Role (OTG-ready) Controller drivers;
  • USB Serial drivers;
  • vDPA drivers;
  • VFIO drivers;
  • Virtio Host (VHOST) subsystem;
  • Framebuffer layer;
  • Virtio drivers;
  • Watchdog drivers;
  • Xen hypervisor drivers;
  • 9P distributed file system;
  • AFS file system;
  • File systems infrastructure;
  • BTRFS file system;
  • Ceph distributed file system;
  • Ext4 file system;
  • F2FS file system;
  • FUSE (File system in Userspace);
  • Journaling layer…
Record
USN-8888-2
Updated
2026-11-09
OSVUSN-8889-1 No score

linux-oem-7.0 vulnerabilities

It was discovered that some AMD processors did not properly perform Reverse Map Table (RMP) checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an out-of-bounds condition and compromise the integrity of SEV-SNP guest memory. (CVE-2023-20585)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • NVDIMM (Non-Volatile Memory Device) drivers;
  • Handshake API;
  • ARM32 architecture;
  • MIPS architecture;
  • OpenRISC architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • x86 architecture;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • Intel NPU Driver;
  • ACPI drivers;
  • Android drivers;
  • Serial ATA and Parallel ATA drivers;
  • Drivers core;
  • Rados block device (RBD) driver;
  • Ublk userspace block driver;
  • Bluetooth drivers;
  • Cdrom driver;
  • Character device driver;
  • TPM device driver;
  • Data acquisition framework and drivers;
  • Hardware crypto device drivers;
  • CXL (Compute Express Link) drivers;
  • DAX dirext access to differentiated memory framework;
  • DIBS (Direct Internal Buffer Sharing) drivers;
  • Buffer Sharing and Synchronization framework;
  • DMA engine subsystem;
  • DPLL subsystem;
  • EDAC drivers;
  • FireWire subsystem;
  • Arm Firmware Framework for ARMv8-A(FFA);
  • ARM SCMI message protocol;
  • Intel Stratix 10 firmware drivers;
  • FPGA Framework;
  • GPIB drivers;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • Microsoft Hyper-V drivers;
  • Hardware monitoring drivers;
  • CoreSight HW tracing drivers;
  • Intel Trace Hub HW tracing drivers;
  • I2C subsystem;
  • I3C subsystem;
  • IIO subsystem;
  • IIO ADC drivers;
  • IIO Magnetometer sensors drivers;
  • InfiniBand drivers;
  • Input Device (Miscellaneous) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • LED subsystem;
  • Mailbox framework;
  • Multiple devices driver;
  • Media drivers;
  • MemoryStick subsystem;
  • Multifunction device drivers;
  • Intel Management Engine Interface driver;
  • Amazon Nitro Secure Module driver;
  • MMC subsystem;
  • MTD block device drivers;
  • Network drivers;
  • Ethernet bonding driver;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • Texas Instruments network drivers;
  • MediaTek network drivers;
  • NTB driver;
  • NVME drivers;
  • Device tree and open firmware driver;
  • Operating Performance Points (OPP) driver;
  • PCI subsystem;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • i.MX PM domains;
  • MediaTek PM domains;
  • Power supply drivers;
  • PTP clock framework;
  • RapidIO drivers;
  • Voltage and Current Regulator drivers;
  • Remote Processor subsystem;
  • MPAM driver;
  • Reset controller framework;
  • Real Time Clock drivers;
  • S/390 drivers;
  • SCSI subsystem;
  • Xilinx SoC drivers;
  • SoundWire subsystem;
  • SPI subsystem;
  • Media staging drivers;
  • Media Oriented Systems Transport (MOST) driver;
  • NVIDIA Tegra embedded controller (NVEC) staging driver;
  • Realtek RTL8723BS SDIO drivers;
  • TTY drivers;
  • UFS subsystem;
  • USB DSL drivers;
  • USB core drivers;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • USB Dual Role (OTG-ready) Controller drivers;
  • USB Serial drivers;
  • vDPA drivers;
  • VFIO drivers;
  • Virtio Host (VHOST) subsystem;
  • Framebuffer layer;
  • Virtio drivers;
  • Watchdog drivers;
  • Xen hypervisor drivers;
  • 9P distributed file system;
  • AFS file system;
  • File systems infrastructure;
  • BTRFS file system;
  • Ceph distributed file system;
  • Ext4 file system;
  • F2FS file system;
  • FUSE (File system in Userspace);
  • Journaling layer for block devices (JBD2);
  • Network file systems library;
  • Network…
Record
USN-8889-1
Updated
2026-11-09
OSVUSN-8917-1 No score

linux, linux-aws, linux-aws-fips, linux-fips, linux-gcp, linux-gcp-fips, linux-gke, linux-gkeop, linux-ibm, linux-lowlatency, linux-oracle, linux-realtime vulnerabilities

It was discovered that some AMD processors did not properly perform Reverse Map Table (RMP) checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an out-of-bounds condition and compromise the integrity of SEV-SNP guest memory. (CVE-2023-20585)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • NVDIMM (Non-Volatile Memory Device) drivers;
  • Handshake API;
  • ARM32 architecture;
  • ARM64 architecture;
  • MIPS architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Intel NPU Driver;
  • ACPI drivers;
  • Android drivers;
  • Serial ATA and Parallel ATA drivers;
  • Drivers core;
  • DRBD Distributed Replicated Block Device drivers;
  • Rados block device (RBD) driver;
  • Bluetooth drivers;
  • Cdrom driver;
  • Character device driver;
  • Hardware random number generator core;
  • TPM device driver;
  • Data acquisition framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • DAX dirext access to differentiated memory framework;
  • Buffer Sharing and Synchronization framework;
  • DMA engine subsystem;
  • FireWire subsystem;
  • Arm Firmware Framework for ARMv8-A(FFA);
  • ARM SCMI message protocol;
  • Intel Stratix 10 firmware drivers;
  • FPGA Framework;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • Microsoft Hyper-V drivers;
  • Hardware monitoring drivers;
  • CoreSight HW tracing drivers;
  • Intel Trace Hub HW tracing drivers;
  • I2C subsystem;
  • IIO subsystem;
  • IIO ADC drivers;
  • IIO Magnetometer sensors drivers;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Miscellaneous) drivers;
  • Input Device (Mouse) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • LED subsystem;
  • Mailbox framework;
  • Multiple devices driver;
  • Media drivers;
  • MemoryStick subsystem;
  • Multifunction device drivers;
  • Intel Management Engine Interface driver;
  • Amazon Nitro Secure Module driver;
  • MMC subsystem;
  • MTD block device drivers;
  • Network drivers;
  • Ethernet bonding driver;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • MediaTek network drivers;
  • NTB driver;
  • NVME drivers;
  • PCI subsystem;
  • x86 platform drivers;
  • i.MX PM domains;
  • System reset/shutdown drivers;
  • Power supply drivers;
  • RapidIO drivers;
  • Voltage and Current Regulator drivers;
  • Remote Processor subsystem;
  • Reset controller framework;
  • RPMSG subsystem;
  • Real Time Clock drivers;
  • S/390 drivers;
  • SCSI subsystem;
  • Xilinx SoC drivers;
  • SPI subsystem;
  • Media staging drivers;
  • Media Oriented Systems Transport (MOST) driver;
  • NVIDIA Tegra embedded controller (NVEC) staging driver;
  • Realtek RTL8723BS SDIO drivers;
  • VME bus staging drivers;
  • TCM subsystem;
  • TTY drivers;
  • USB DSL drivers;
  • Cadence USB3 driver;
  • ULPI bus;
  • USB core drivers;
  • DesignWare USB3 driver;
  • Faraday FOTG210 USB2 dual-role controller driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • USB ChaosKey driver;
  • Siemens ID Mouse USB driver;
  • IOWarrior USB driver;
  • LD Didactic USB driver;
  • LEGO USB Tower driver;
  • USS720 USB parallel port adapter driver;
  • MediaTek USB3 DRD driver;
  • USB Dual Role (OTG-ready) Controller drivers;
  • USB Serial drivers;
  • USB Type-C Port Controller Manager driver;
  • USB Type-C Connector System Software Interface driver;
  • USB over IP driver;
  • vDPA drivers;
  • VFIO drivers;
  • Virtio Host (VHOST) subsystem;
  • Framebuffer layer;
  • Watchdog drivers;
  • Xen hypervisor drivers;
  • 9P distributed file system;
  • AFS file system;
  • File systems infrastructure;
  • BTRFS file…
Record
USN-8917-1
Updated
2026-11-09
OSVUSN-8918-1 No score

linux-azure, linux-azure-fde, linux-azure-fips vulnerabilities

It was discovered that some AMD processors did not properly perform Reverse Map Table (RMP) checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an out-of-bounds condition and compromise the integrity of SEV-SNP guest memory. (CVE-2023-20585)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • NVDIMM (Non-Volatile Memory Device) drivers;
  • Handshake API;
  • ARM32 architecture;
  • ARM64 architecture;
  • MIPS architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Intel NPU Driver;
  • ACPI drivers;
  • Android drivers;
  • Serial ATA and Parallel ATA drivers;
  • Drivers core;
  • DRBD Distributed Replicated Block Device drivers;
  • Rados block device (RBD) driver;
  • Bluetooth drivers;
  • Cdrom driver;
  • Character device driver;
  • Hardware random number generator core;
  • TPM device driver;
  • Data acquisition framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • DAX dirext access to differentiated memory framework;
  • Buffer Sharing and Synchronization framework;
  • DMA engine subsystem;
  • FireWire subsystem;
  • Arm Firmware Framework for ARMv8-A(FFA);
  • ARM SCMI message protocol;
  • Intel Stratix 10 firmware drivers;
  • FPGA Framework;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • Microsoft Hyper-V drivers;
  • Hardware monitoring drivers;
  • CoreSight HW tracing drivers;
  • Intel Trace Hub HW tracing drivers;
  • I2C subsystem;
  • IIO subsystem;
  • IIO ADC drivers;
  • IIO Magnetometer sensors drivers;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Miscellaneous) drivers;
  • Input Device (Mouse) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • LED subsystem;
  • Mailbox framework;
  • Multiple devices driver;
  • Media drivers;
  • MemoryStick subsystem;
  • Multifunction device drivers;
  • Intel Management Engine Interface driver;
  • Amazon Nitro Secure Module driver;
  • MMC subsystem;
  • MTD block device drivers;
  • Network drivers;
  • Ethernet bonding driver;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • MediaTek network drivers;
  • NTB driver;
  • NVME drivers;
  • PCI subsystem;
  • x86 platform drivers;
  • i.MX PM domains;
  • System reset/shutdown drivers;
  • Power supply drivers;
  • RapidIO drivers;
  • Voltage and Current Regulator drivers;
  • Remote Processor subsystem;
  • Reset controller framework;
  • RPMSG subsystem;
  • Real Time Clock drivers;
  • S/390 drivers;
  • SCSI subsystem;
  • Xilinx SoC drivers;
  • SPI subsystem;
  • Media staging drivers;
  • Media Oriented Systems Transport (MOST) driver;
  • NVIDIA Tegra embedded controller (NVEC) staging driver;
  • Realtek RTL8723BS SDIO drivers;
  • VME bus staging drivers;
  • TCM subsystem;
  • TTY drivers;
  • USB DSL drivers;
  • Cadence USB3 driver;
  • ULPI bus;
  • USB core drivers;
  • DesignWare USB3 driver;
  • Faraday FOTG210 USB2 dual-role controller driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • USB ChaosKey driver;
  • Siemens ID Mouse USB driver;
  • IOWarrior USB driver;
  • LD Didactic USB driver;
  • LEGO USB Tower driver;
  • USS720 USB parallel port adapter driver;
  • MediaTek USB3 DRD driver;
  • USB Dual Role (OTG-ready) Controller drivers;
  • USB Serial drivers;
  • USB Type-C Port Controller Manager driver;
  • USB Type-C Connector System Software Interface driver;
  • USB over IP driver;
  • vDPA drivers;
  • VFIO drivers;
  • Virtio Host (VHOST) subsystem;
  • Framebuffer layer;
  • Watchdog drivers;
  • Xen hypervisor drivers;
  • 9P distributed file system;
  • AFS file system;
  • File systems infrastructure;
  • BTRFS file…
Record
USN-8918-1
Updated
2026-11-09
OSVUSN-8963-1 No score

linux-nvidia-tegra, linux-nvidia-tegra-5.15, linux-nvidia-tegra-igx vulnerabilities

Duoming Zhou discovered race conditions in the AX.25 amateur radio protocol implementation in the Linux kernel, leading to use-after-free vulnerabilities. A local attacker could possibly use this to cause a denial of service (system crash). (CVE-2022-1205)

It was discovered that the i.MX clock driver in the Linux kernel did not properly handle certain memory allocation failure conditions, leading to a null pointer dereference vulnerability. A local attacker could possibly use this to cause a denial of service (system crash). (CVE-2022-3114)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • USB Gadget drivers;
  • Networking core;
  • User-space API (UAPI);
  • ARM32 architecture;
  • ARM64 architecture;
  • MIPS architecture;
  • OpenRISC architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Speakup Console Speech Driver;
  • ACPI drivers;
  • Android drivers;
  • Serial ATA and Parallel ATA drivers;
  • Auxiliary display drivers;
  • Drivers core;
  • DRBD Distributed Replicated Block Device drivers;
  • Rados block device (RBD) driver;
  • Bluetooth drivers;
  • Cdrom driver;
  • Character device driver;
  • Hardware random number generator core;
  • TPM device driver;
  • Clock framework and drivers;
  • Clocksource drivers;
  • Data acquisition framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • DAX dirext access to differentiated memory framework;
  • Buffer Sharing and Synchronization framework;
  • DMA engine subsystem;
  • EDAC drivers;
  • FireWire subsystem;
  • Arm Firmware Framework for ARMv8-A(FFA);
  • ARM SCMI message protocol;
  • ARM SCPI message protocol;
  • Google firmware drivers;
  • Intel Stratix 10 firmware drivers;
  • FPGA Framework;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • HSI subsystem;
  • Hardware monitoring drivers;
  • CoreSight HW tracing drivers;
  • Intel Trace Hub HW tracing drivers;
  • I2C subsystem;
  • I3C subsystem;
  • IIO subsystem;
  • IIO ADC drivers;
  • IIO Magnetometer sensors drivers;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Miscellaneous) drivers;
  • Input Device (Mouse) drivers;
  • On-Chip Interconnect management framework;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • LED subsystem;
  • Multiple devices driver;
  • Media drivers;
  • MemoryStick subsystem;
  • Multifunction device drivers;
  • Analog Devices digital potentiometer driver;
  • Broadcom VK accelerator driver;
  • Fastrpc Driver;
  • MMC subsystem;
  • MTD block device drivers;
  • Ethernet bonding driver;
  • Network drivers;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • STMicroelectronics network drivers;
  • Texas Instruments network drivers;
  • MediaTek network drivers;
  • Near Field Communication (NFC) drivers;
  • NTB driver;
  • NVDIMM (Non-Volatile Memory Device) drivers;
  • NVME drivers;
  • Device tree and open firmware driver;
  • PA-RISC drivers;
  • Parport drivers;
  • PCI subsystem;
  • PHY drivers;
  • Pin controllers subsystem;
  • Chrome hardware platform drivers;
  • Mellanox platform drivers;
  • Microsoft Surface platform drivers;
  • x86 platform drivers;
  • Generic PM domains;
  • System reset/shutdown drivers;
  • Power supply drivers;
  • RapidIO drivers;
  • Voltage and Current Regulator drivers;
  • Remote Processor subsystem;
  • Reset controller framework;
  • RPMSG subsystem;
  • Real Time Clock drivers;
  • S/390 drivers;
  • SCSI subsystem;
  • SLIMbus drivers;
  • SPI subsystem;
  • small TFT LCD display modules;
  • Greybus lights staging drivers;
  • Media staging drivers;
  • Media Oriented Systems Transport (MOST) driver;
  • NVIDIA Tegra embedded controller (NVEC)…
Record
USN-8963-1
Updated
2026-11-07
OSVUSN-9003-1 No score

linux-nvidia-7.0, linux-nvidia-bos vulnerabilities

It was discovered that some AMD processors did not properly perform Reverse Map Table (RMP) checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an out-of-bounds condition and compromise the integrity of SEV-SNP guest memory. (CVE-2023-20585)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • NVDIMM (Non-Volatile Memory Device) drivers;
  • Handshake API;
  • ARM32 architecture;
  • MIPS architecture;
  • OpenRISC architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • x86 architecture;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • Intel NPU Driver;
  • ACPI drivers;
  • Android drivers;
  • Serial ATA and Parallel ATA drivers;
  • Drivers core;
  • DRBD Distributed Replicated Block Device drivers;
  • Rados block device (RBD) driver;
  • Ublk userspace block driver;
  • Bluetooth drivers;
  • Cdrom driver;
  • Character device driver;
  • TPM device driver;
  • Data acquisition framework and drivers;
  • Hardware crypto device drivers;
  • CXL (Compute Express Link) drivers;
  • DAX dirext access to differentiated memory framework;
  • DIBS (Direct Internal Buffer Sharing) drivers;
  • Buffer Sharing and Synchronization framework;
  • DMA engine subsystem;
  • DPLL subsystem;
  • EDAC drivers;
  • FireWire subsystem;
  • Arm Firmware Framework for ARMv8-A(FFA);
  • ARM SCMI message protocol;
  • Intel Stratix 10 firmware drivers;
  • FPGA Framework;
  • GPIB drivers;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • Microsoft Hyper-V drivers;
  • Hardware monitoring drivers;
  • CoreSight HW tracing drivers;
  • Intel Trace Hub HW tracing drivers;
  • I2C subsystem;
  • I3C subsystem;
  • IIO subsystem;
  • IIO ADC drivers;
  • IIO Magnetometer sensors drivers;
  • InfiniBand drivers;
  • Input Device (Miscellaneous) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • LED subsystem;
  • Mailbox framework;
  • Multiple devices driver;
  • Media drivers;
  • MemoryStick subsystem;
  • Multifunction device drivers;
  • Intel Management Engine Interface driver;
  • Amazon Nitro Secure Module driver;
  • MMC subsystem;
  • MTD block device drivers;
  • Network drivers;
  • Ethernet bonding driver;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • Texas Instruments network drivers;
  • MediaTek network drivers;
  • NTB driver;
  • NVME drivers;
  • Device tree and open firmware driver;
  • Operating Performance Points (OPP) driver;
  • PCI subsystem;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • i.MX PM domains;
  • MediaTek PM domains;
  • Power supply drivers;
  • PTP clock framework;
  • RapidIO drivers;
  • Voltage and Current Regulator drivers;
  • Remote Processor subsystem;
  • MPAM driver;
  • Reset controller framework;
  • Real Time Clock drivers;
  • S/390 drivers;
  • SCSI subsystem;
  • Xilinx SoC drivers;
  • SoundWire subsystem;
  • SPI subsystem;
  • Media staging drivers;
  • Media Oriented Systems Transport (MOST) driver;
  • NVIDIA Tegra embedded controller (NVEC) staging driver;
  • Realtek RTL8723BS SDIO drivers;
  • TCM subsystem;
  • TTY drivers;
  • UFS subsystem;
  • USB DSL drivers;
  • USB core drivers;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • USB Dual Role (OTG-ready) Controller drivers;
  • USB Serial drivers;
  • vDPA drivers;
  • VFIO drivers;
  • Virtio Host (VHOST) subsystem;
  • Framebuffer layer;
  • Virtio drivers;
  • Watchdog drivers;
  • Xen hypervisor drivers;
  • 9P distributed file system;
  • AFS file system;
  • File systems infrastructure;
  • BTRFS file system;
  • Ceph distributed file system;
  • Ext4 file system;
  • F2FS file system;
  • FUSE (File system in Userspace);
  • Journaling layer…
Record
USN-9003-1
Updated
2026-11-06

Affected products

Affected packages

Affected packages
PackageAffectedFixed
kernel
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-64k
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-64k-core
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-64k-debug
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-64k-debug-core
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-64k-debug-devel
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-64k-debug-devel-matched
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-64k-debug-modules
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-64k-debug-modules-core
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-64k-debug-modules-extra
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
Show 290 moreShow less
Affected packages
PackageAffectedFixed
kernel-64k-devel
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-64k-devel-matched
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-64k-modules
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-64k-modules-core
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-64k-modules-extra
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-abi-stablelists
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-core
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-cross-headers
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-debug
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-debug-core
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-debug-devel
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-debug-devel-matched
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-debug-modules
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-debug-modules-core
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-debug-modules-extra
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-debug-uki-virt
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-devel
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-devel-matched
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-doc
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-headers
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-modules
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-modules-core
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-modules-extra
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-modules-extra-matched
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-rt
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-rt-64k
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-rt-64k-core
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-rt-64k-debug
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-rt-64k-debug-core
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-rt-64k-debug-devel
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-rt-64k-debug-modules
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-rt-64k-debug-modules-core
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-rt-64k-debug-modules-extra
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-rt-64k-devel
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-rt-64k-modules
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-rt-64k-modules-core
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-rt-64k-modules-extra
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-rt-core
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-rt-debug
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-rt-debug-core
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-rt-debug-devel
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-rt-debug-modules
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-rt-debug-modules-core
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-rt-debug-modules-extra
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-rt-devel
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-rt-modules
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-rt-modules-core
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-rt-modules-extra
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-tools
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-tools-libs
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-tools-libs-devel
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-uki-virt
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-uki-virt-addons
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
kernel-zfcpdump
AlmaLinux:10
From an advisory covering 25 CVEs
 before 6.12.0-211.49.1.el10_2
6.12.0-211.49.1.el10_2
linux-lts
Alpaquita:23
 6.1.182-r0 up to 6.1.189-r0
6.1.189-r0
linux-lts
Alpaquita:25
 6.12.95-r0 up to 6.12.103-r0
6.12.103-r0
linux-lts
Alpaquita:stream
 6.18.38-r0 up to 6.18.43-r0
6.18.43-r0
bpftool
TuxCare:AlmaLinux:9.2
From an advisory covering 157 CVEs
 before 7.0.0-284.1101.el9_2.tuxcare.11.els13
7.0.0-284.1101.el9_2.tuxcare.11.els13
kernel
TuxCare:AlmaLinux:9.2
From an advisory covering 157 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els13
5.14.0-284.1101.el9_2.tuxcare.11.els13
kernel-64k
TuxCare:AlmaLinux:9.2
From an advisory covering 157 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els13
5.14.0-284.1101.el9_2.tuxcare.11.els13
kernel-64k-core
TuxCare:AlmaLinux:9.2
From an advisory covering 157 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els13
5.14.0-284.1101.el9_2.tuxcare.11.els13
kernel-64k-debug
TuxCare:AlmaLinux:9.2
From an advisory covering 157 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els13
5.14.0-284.1101.el9_2.tuxcare.11.els13
kernel-64k-debug-core
TuxCare:AlmaLinux:9.2
From an advisory covering 157 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els13
5.14.0-284.1101.el9_2.tuxcare.11.els13
kernel-64k-debug-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 157 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els13
5.14.0-284.1101.el9_2.tuxcare.11.els13
kernel-64k-debug-devel-matched
TuxCare:AlmaLinux:9.2
From an advisory covering 157 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els13
5.14.0-284.1101.el9_2.tuxcare.11.els13
kernel-64k-debug-modules
TuxCare:AlmaLinux:9.2
From an advisory covering 157 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els13
5.14.0-284.1101.el9_2.tuxcare.11.els13
kernel-64k-debug-modules-core
TuxCare:AlmaLinux:9.2
From an advisory covering 157 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els13
5.14.0-284.1101.el9_2.tuxcare.11.els13
kernel-64k-debug-modules-extra
TuxCare:AlmaLinux:9.2
From an advisory covering 157 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els13
5.14.0-284.1101.el9_2.tuxcare.11.els13
kernel-64k-debug-modules-internal
TuxCare:AlmaLinux:9.2
From an advisory covering 157 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els13
5.14.0-284.1101.el9_2.tuxcare.11.els13
kernel-64k-debug-modules-partner
TuxCare:AlmaLinux:9.2
From an advisory covering 157 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els13
5.14.0-284.1101.el9_2.tuxcare.11.els13
kernel-64k-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 157 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els13
5.14.0-284.1101.el9_2.tuxcare.11.els13
kernel-64k-devel-matched
TuxCare:AlmaLinux:9.2
From an advisory covering 157 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els13
5.14.0-284.1101.el9_2.tuxcare.11.els13
kernel-64k-modules
TuxCare:AlmaLinux:9.2
From an advisory covering 157 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els13
5.14.0-284.1101.el9_2.tuxcare.11.els13
kernel-64k-modules-core
TuxCare:AlmaLinux:9.2
From an advisory covering 157 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els13
5.14.0-284.1101.el9_2.tuxcare.11.els13
kernel-64k-modules-extra
TuxCare:AlmaLinux:9.2
From an advisory covering 157 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els13
5.14.0-284.1101.el9_2.tuxcare.11.els13
kernel-64k-modules-internal
TuxCare:AlmaLinux:9.2
From an advisory covering 157 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els13
5.14.0-284.1101.el9_2.tuxcare.11.els13
kernel-64k-modules-partner
TuxCare:AlmaLinux:9.2
From an advisory covering 157 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els13
5.14.0-284.1101.el9_2.tuxcare.11.els13
kernel-abi-stablelists
TuxCare:AlmaLinux:9.2
From an advisory covering 157 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els13
5.14.0-284.1101.el9_2.tuxcare.11.els13
kernel-core
TuxCare:AlmaLinux:9.2
From an advisory covering 157 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els13
5.14.0-284.1101.el9_2.tuxcare.11.els13
kernel-cross-headers
TuxCare:AlmaLinux:9.2
From an advisory covering 157 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els13
5.14.0-284.1101.el9_2.tuxcare.11.els13
kernel-debug
TuxCare:AlmaLinux:9.2
From an advisory covering 157 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els13
5.14.0-284.1101.el9_2.tuxcare.11.els13
kernel-debug-core
TuxCare:AlmaLinux:9.2
From an advisory covering 157 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els13
5.14.0-284.1101.el9_2.tuxcare.11.els13
kernel-debug-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 157 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els13
5.14.0-284.1101.el9_2.tuxcare.11.els13
kernel-debug-devel-matched
TuxCare:AlmaLinux:9.2
From an advisory covering 157 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els13
5.14.0-284.1101.el9_2.tuxcare.11.els13
kernel-debug-modules
TuxCare:AlmaLinux:9.2
From an advisory covering 157 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els13
5.14.0-284.1101.el9_2.tuxcare.11.els13
kernel-debug-modules-core
TuxCare:AlmaLinux:9.2
From an advisory covering 157 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els13
5.14.0-284.1101.el9_2.tuxcare.11.els13
kernel-debug-modules-extra
TuxCare:AlmaLinux:9.2
From an advisory covering 157 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els13
5.14.0-284.1101.el9_2.tuxcare.11.els13
kernel-debug-modules-internal
TuxCare:AlmaLinux:9.2
From an advisory covering 157 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els13
5.14.0-284.1101.el9_2.tuxcare.11.els13
kernel-debug-modules-partner
TuxCare:AlmaLinux:9.2
From an advisory covering 157 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els13
5.14.0-284.1101.el9_2.tuxcare.11.els13
kernel-debug-uki-virt
TuxCare:AlmaLinux:9.2
From an advisory covering 157 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els13
5.14.0-284.1101.el9_2.tuxcare.11.els13
kernel-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 157 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els13
5.14.0-284.1101.el9_2.tuxcare.11.els13
kernel-devel-matched
TuxCare:AlmaLinux:9.2
From an advisory covering 157 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els13
5.14.0-284.1101.el9_2.tuxcare.11.els13
kernel-doc
TuxCare:AlmaLinux:9.2
From an advisory covering 157 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els13
5.14.0-284.1101.el9_2.tuxcare.11.els13
kernel-headers
TuxCare:AlmaLinux:9.2
From an advisory covering 157 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els13
5.14.0-284.1101.el9_2.tuxcare.11.els13
kernel-ipaclones-internal
TuxCare:AlmaLinux:9.2
From an advisory covering 157 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els13
5.14.0-284.1101.el9_2.tuxcare.11.els13
kernel-modules
TuxCare:AlmaLinux:9.2
From an advisory covering 157 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els13
5.14.0-284.1101.el9_2.tuxcare.11.els13
kernel-modules-core
TuxCare:AlmaLinux:9.2
From an advisory covering 157 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els13
5.14.0-284.1101.el9_2.tuxcare.11.els13
kernel-modules-extra
TuxCare:AlmaLinux:9.2
From an advisory covering 157 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els13
5.14.0-284.1101.el9_2.tuxcare.11.els13
kernel-modules-internal
TuxCare:AlmaLinux:9.2
From an advisory covering 157 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els13
5.14.0-284.1101.el9_2.tuxcare.11.els13
kernel-modules-partner
TuxCare:AlmaLinux:9.2
From an advisory covering 157 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els13
5.14.0-284.1101.el9_2.tuxcare.11.els13
kernel-selftests-internal
TuxCare:AlmaLinux:9.2
From an advisory covering 157 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els13
5.14.0-284.1101.el9_2.tuxcare.11.els13
kernel-tools
TuxCare:AlmaLinux:9.2
From an advisory covering 157 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els13
5.14.0-284.1101.el9_2.tuxcare.11.els13
kernel-tools-libs
TuxCare:AlmaLinux:9.2
From an advisory covering 157 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els13
5.14.0-284.1101.el9_2.tuxcare.11.els13
kernel-tools-libs-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 157 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els13
5.14.0-284.1101.el9_2.tuxcare.11.els13
kernel-uki-virt
TuxCare:AlmaLinux:9.2
From an advisory covering 157 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els13
5.14.0-284.1101.el9_2.tuxcare.11.els13
libbpf
TuxCare:AlmaLinux:9.2
From an advisory covering 157 CVEs
 before 2:1.0.0-2.el9_2.tuxcare.11.els13
2:1.0.0-2.el9_2.tuxcare.11.els13
libbpf-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 157 CVEs
 before 2:1.0.0-2.el9_2.tuxcare.11.els13
2:1.0.0-2.el9_2.tuxcare.11.els13
libbpf-static
TuxCare:AlmaLinux:9.2
From an advisory covering 157 CVEs
 before 2:1.0.0-2.el9_2.tuxcare.11.els13
2:1.0.0-2.el9_2.tuxcare.11.els13
perf
TuxCare:AlmaLinux:9.2
From an advisory covering 157 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els13
5.14.0-284.1101.el9_2.tuxcare.11.els13
python3-perf
TuxCare:AlmaLinux:9.2
From an advisory covering 157 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els13
5.14.0-284.1101.el9_2.tuxcare.11.els13
rtla
TuxCare:AlmaLinux:9.2
From an advisory covering 157 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els13
5.14.0-284.1101.el9_2.tuxcare.11.els13
kernel
TuxCare:AlmaLinux:9.6
From an advisory covering 183 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-64k
TuxCare:AlmaLinux:9.6
From an advisory covering 183 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-64k-core
TuxCare:AlmaLinux:9.6
From an advisory covering 183 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-64k-debug
TuxCare:AlmaLinux:9.6
From an advisory covering 183 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-64k-debug-core
TuxCare:AlmaLinux:9.6
From an advisory covering 183 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-64k-debug-devel
TuxCare:AlmaLinux:9.6
From an advisory covering 183 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-64k-debug-devel-matched
TuxCare:AlmaLinux:9.6
From an advisory covering 183 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-64k-debug-modules
TuxCare:AlmaLinux:9.6
From an advisory covering 183 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-64k-debug-modules-core
TuxCare:AlmaLinux:9.6
From an advisory covering 183 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-64k-debug-modules-extra
TuxCare:AlmaLinux:9.6
From an advisory covering 183 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
Kernel
Linux
 before 5.10.265, 5.11.0 up to 5.15.216, 5.14.0 up to 6.1.183, 5.16.0 up to 6.6.148, 6.2.0 up to 6.12.101, 6.7.0 up to 6.18.42, 6.13.0 up to 7.1.6
5.10.2655.15.2166.1.1836.6.1486.12.1016.18.427.1.6
linux
Debian:12
 before 6.1.187-1, plus listed versions
6.1.106-16.1.106-26.1.106-36.1.112-16.1.115-1
Show 45 moreShow less
6.1.119-16.1.123-16.1.124-16.1.128-16.1.129-16.1.133-16.1.135-16.1.137-16.1.139-16.1.140-16.1.147-16.1.148-16.1.153-16.1.158-16.1.159-16.1.162-16.1.164-16.1.170-16.1.170-26.1.170-36.1.172-16.1.174-16.1.176-16.1.177-16.1.180-16.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+16.1.38-36.1.38-46.1.38-4~bpo11+16.1.52-16.1.55-16.1.55-1~bpo11+16.1.64-16.1.66-16.1.67-16.1.69-16.1.69-1~bpo11+16.1.76-16.1.76-1~bpo11+16.1.82-16.1.85-1
6.1.187-1
linux
Debian:13
 before 6.12.101-1, plus listed versions
6.12.100-16.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+1
Show 27 moreShow less
6.12.48-16.12.57-16.12.57-1~bpo12+16.12.63-16.12.63-1~bpo12+16.12.69-16.12.69-1~bpo12+16.12.73-16.12.73-1~bpo12+16.12.74-16.12.74-26.12.74-2~bpo12+16.12.85-16.12.85-1~bpo12+16.12.86-16.12.86-1~bpo12+16.12.88-16.12.88-1~bpo12+16.12.90-16.12.90-1~bpo12+16.12.90-26.12.90-2~bpo12+16.12.94-16.12.94-1~bpo12+16.12.95-16.12.95-1~bpo12+16.12.96-1
6.12.101-1
linux
Debian:14
 before 7.1.6-1, plus listed versions
6.12.100-16.12.101-16.12.105-16.12.107-16.12.111-1
Show 45 moreShow less
6.12.113-16.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+16.12.48-16.12.57-16.12.57-1~bpo12+16.12.63-16.12.63-1~bpo12+16.12.69-16.12.69-1~bpo12+16.12.73-16.12.73-1~bpo12+16.12.74-16.12.74-26.12.74-2~bpo12+16.12.85-16.12.85-1~bpo12+16.12.86-16.12.86-1~bpo12+16.12.88-16.12.88-1~bpo12+16.12.90-16.12.90-1~bpo12+16.12.90-26.12.90-2~bpo12+16.12.94-16.12.94-1~bpo12+16.12.95-16.12.95-1~bpo12+16.12.96-16.13.10-1~exp16.13.11-1~exp16.13.2-1~exp16.13.3-1~exp16.13.4-1~exp16.13.5-1~exp16.13.6-1~exp16.13.7-1~exp16.13.8-1~exp16.13.9-1~exp16.13~rc6-1~exp16.13~rc7-1~exp16.14.3-1~exp1
7.1.6-1
linux-6.12
Debian:12
 before 6.12.101-1~deb12u1, plus listed versions
6.12.100-1~deb12u1
6.12.101-1~deb12u1
kernel
Mageia:10
From an advisory covering 367 CVEs
 before 6.18.44-1.mga10
6.18.44-1.mga10
kmod-xtables-addons
Mageia:10
From an advisory covering 367 CVEs
 before 3.30-4.mga10
3.30-4.mga10
kmod-virtualbox
Mageia:10
From an advisory covering 367 CVEs
 before 7.2.14-30.mga10
7.2.14-30.mga10
kmod-nvidia-current-wopengpu
Mageia:10
From an advisory covering 367 CVEs
 before 580.173.02-39.mga10.nonfree
580.173.02-39.mga10.nonfree
drakx-installer-images
Mageia:10
From an advisory covering 367 CVEs
 before 2.94-55.mga10.nonfree
2.94-55.mga10.nonfree
kernel-linus
Mageia:10
From an advisory covering 367 CVEs
 before 6.18.44-1.mga10
6.18.44-1.mga10
kernel
openEuler:22.03-LTS-SP4
From an advisory covering 35 CVEs
 before 5.10.0-332.0.0.233.oe2203sp4
5.10.0-332.0.0.233.oe2203sp4
kernel-64k-debug-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 25 CVEs
 before 0:6.12.0-211.49.1.el10_2
0:6.12.0-211.49.1.el10_2
kernel-64k-debug-devel
Red Hat:enterprise_linux:10.2
From an advisory covering 25 CVEs
 before 0:6.12.0-211.49.1.el10_2
0:6.12.0-211.49.1.el10_2
kernel-64k-debug-devel-matched
Red Hat:enterprise_linux:10.2
From an advisory covering 25 CVEs
 before 0:6.12.0-211.49.1.el10_2
0:6.12.0-211.49.1.el10_2
kernel-64k-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 25 CVEs
 before 0:6.12.0-211.49.1.el10_2
0:6.12.0-211.49.1.el10_2
kernel-64k-devel
Red Hat:enterprise_linux:10.2
From an advisory covering 25 CVEs
 before 0:6.12.0-211.49.1.el10_2
0:6.12.0-211.49.1.el10_2
kernel-64k-devel-matched
Red Hat:enterprise_linux:10.2
From an advisory covering 25 CVEs
 before 0:6.12.0-211.49.1.el10_2
0:6.12.0-211.49.1.el10_2
kernel-debug-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 25 CVEs
 before 0:6.12.0-211.49.1.el10_2
0:6.12.0-211.49.1.el10_2
kernel-debug-devel
Red Hat:enterprise_linux:10.2
From an advisory covering 25 CVEs
 before 0:6.12.0-211.49.1.el10_2
0:6.12.0-211.49.1.el10_2
kernel-debug-devel-matched
Red Hat:enterprise_linux:10.2
From an advisory covering 25 CVEs
 before 0:6.12.0-211.49.1.el10_2
0:6.12.0-211.49.1.el10_2
kernel-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 25 CVEs
 before 0:6.12.0-211.49.1.el10_2
0:6.12.0-211.49.1.el10_2
kernel-debuginfo-common-aarch64
Red Hat:enterprise_linux:10.2
From an advisory covering 25 CVEs
 before 0:6.12.0-211.49.1.el10_2
0:6.12.0-211.49.1.el10_2
kernel-debuginfo-common-ppc64le
Red Hat:enterprise_linux:10.2
From an advisory covering 25 CVEs
 before 0:6.12.0-211.49.1.el10_2
0:6.12.0-211.49.1.el10_2
kernel-debuginfo-common-s390x
Red Hat:enterprise_linux:10.2
From an advisory covering 25 CVEs
 before 0:6.12.0-211.49.1.el10_2
0:6.12.0-211.49.1.el10_2
kernel-debuginfo-common-x86_64
Red Hat:enterprise_linux:10.2
From an advisory covering 25 CVEs
 before 0:6.12.0-211.49.1.el10_2
0:6.12.0-211.49.1.el10_2
kernel-devel
Red Hat:enterprise_linux:10.2
From an advisory covering 25 CVEs
 before 0:6.12.0-211.49.1.el10_2
0:6.12.0-211.49.1.el10_2
kernel-devel-matched
Red Hat:enterprise_linux:10.2
From an advisory covering 25 CVEs
 before 0:6.12.0-211.49.1.el10_2
0:6.12.0-211.49.1.el10_2
kernel-doc
Red Hat:enterprise_linux:10.2
From an advisory covering 25 CVEs
 before 0:6.12.0-211.49.1.el10_2
0:6.12.0-211.49.1.el10_2
kernel-rt-64k-debug-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 25 CVEs
 before 0:6.12.0-211.49.1.el10_2
0:6.12.0-211.49.1.el10_2
kernel-rt-64k-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 25 CVEs
 before 0:6.12.0-211.49.1.el10_2
0:6.12.0-211.49.1.el10_2
kernel-rt-debug-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 25 CVEs
 before 0:6.12.0-211.49.1.el10_2
0:6.12.0-211.49.1.el10_2
kernel-rt-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 25 CVEs
 before 0:6.12.0-211.49.1.el10_2
0:6.12.0-211.49.1.el10_2
kernel-tools-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 25 CVEs
 before 0:6.12.0-211.49.1.el10_2
0:6.12.0-211.49.1.el10_2
kernel-zfcpdump-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 25 CVEs
 before 0:6.12.0-211.49.1.el10_2
0:6.12.0-211.49.1.el10_2
kernel-zfcpdump-devel
Red Hat:enterprise_linux:10.2
From an advisory covering 25 CVEs
 before 0:6.12.0-211.49.1.el10_2
0:6.12.0-211.49.1.el10_2
kernel-zfcpdump-devel-matched
Red Hat:enterprise_linux:10.2
From an advisory covering 25 CVEs
 before 0:6.12.0-211.49.1.el10_2
0:6.12.0-211.49.1.el10_2
libperf-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 25 CVEs
 before 0:6.12.0-211.49.1.el10_2
0:6.12.0-211.49.1.el10_2
perf
Red Hat:enterprise_linux:10.2
From an advisory covering 25 CVEs
 before 0:6.12.0-211.49.1.el10_2
0:6.12.0-211.49.1.el10_2
perf-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 25 CVEs
 before 0:6.12.0-211.49.1.el10_2
0:6.12.0-211.49.1.el10_2
python3-perf
Red Hat:enterprise_linux:10.2
From an advisory covering 25 CVEs
 before 0:6.12.0-211.49.1.el10_2
0:6.12.0-211.49.1.el10_2
python3-perf-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 25 CVEs
 before 0:6.12.0-211.49.1.el10_2
0:6.12.0-211.49.1.el10_2
rtla
Red Hat:enterprise_linux:10.2
From an advisory covering 25 CVEs
 before 0:6.12.0-211.49.1.el10_2
0:6.12.0-211.49.1.el10_2
rv
Red Hat:enterprise_linux:10.2
From an advisory covering 25 CVEs
 before 0:6.12.0-211.49.1.el10_2
0:6.12.0-211.49.1.el10_2
kernel
Red Hat:enterprise_linux:10.2
From an advisory covering 25 CVEs
 before 0:6.12.0-211.49.1.el10_2
0:6.12.0-211.49.1.el10_2
kernel-64k
Red Hat:enterprise_linux:10.2
From an advisory covering 25 CVEs
 before 0:6.12.0-211.49.1.el10_2
0:6.12.0-211.49.1.el10_2
kernel-64k-core
Red Hat:enterprise_linux:10.2
From an advisory covering 25 CVEs
 before 0:6.12.0-211.49.1.el10_2
0:6.12.0-211.49.1.el10_2
kernel-64k-debug
Red Hat:enterprise_linux:10.2
From an advisory covering 25 CVEs
 before 0:6.12.0-211.49.1.el10_2
0:6.12.0-211.49.1.el10_2
kernel-64k-debug-core
Red Hat:enterprise_linux:10.2
From an advisory covering 25 CVEs
 before 0:6.12.0-211.49.1.el10_2
0:6.12.0-211.49.1.el10_2
kernel-64k-debug-modules
Red Hat:enterprise_linux:10.2
From an advisory covering 25 CVEs
 before 0:6.12.0-211.49.1.el10_2
0:6.12.0-211.49.1.el10_2
kernel-64k-debug-modules-core
Red Hat:enterprise_linux:10.2
From an advisory covering 25 CVEs
 before 0:6.12.0-211.49.1.el10_2
0:6.12.0-211.49.1.el10_2
kernel-64k-debug-modules-extra
Red Hat:enterprise_linux:10.2
From an advisory covering 25 CVEs
 before 0:6.12.0-211.49.1.el10_2
0:6.12.0-211.49.1.el10_2
kernel-64k-modules
Red Hat:enterprise_linux:10.2
From an advisory covering 25 CVEs
 before 0:6.12.0-211.49.1.el10_2
0:6.12.0-211.49.1.el10_2
kernel-64k-modules-core
Red Hat:enterprise_linux:10.2
From an advisory covering 25 CVEs
 before 0:6.12.0-211.49.1.el10_2
0:6.12.0-211.49.1.el10_2
kernel-64k-modules-extra
Red Hat:enterprise_linux:10.2
From an advisory covering 25 CVEs
 before 0:6.12.0-211.49.1.el10_2
0:6.12.0-211.49.1.el10_2
kernel-abi-stablelists
Red Hat:enterprise_linux:10.2
From an advisory covering 25 CVEs
 before 0:6.12.0-211.49.1.el10_2
0:6.12.0-211.49.1.el10_2
kernel-core
Red Hat:enterprise_linux:10.2
From an advisory covering 25 CVEs
 before 0:6.12.0-211.49.1.el10_2
0:6.12.0-211.49.1.el10_2
kernel-debug
Red Hat:enterprise_linux:10.2
From an advisory covering 25 CVEs
 before 0:6.12.0-211.49.1.el10_2
0:6.12.0-211.49.1.el10_2
kernel-debug-core
Red Hat:enterprise_linux:10.2
From an advisory covering 25 CVEs
 before 0:6.12.0-211.49.1.el10_2
0:6.12.0-211.49.1.el10_2
kernel-debug-modules
Red Hat:enterprise_linux:10.2
From an advisory covering 25 CVEs
 before 0:6.12.0-211.49.1.el10_2
0:6.12.0-211.49.1.el10_2
kernel-debug-modules-core
Red Hat:enterprise_linux:10.2
From an advisory covering 25 CVEs
 before 0:6.12.0-211.49.1.el10_2
0:6.12.0-211.49.1.el10_2
kernel-debug-modules-extra
Red Hat:enterprise_linux:10.2
From an advisory covering 25 CVEs
 before 0:6.12.0-211.49.1.el10_2
0:6.12.0-211.49.1.el10_2
kernel-debug-uki-virt
Red Hat:enterprise_linux:10.2
From an advisory covering 25 CVEs
 before 0:6.12.0-211.49.1.el10_2
0:6.12.0-211.49.1.el10_2
kernel-modules
Red Hat:enterprise_linux:10.2
From an advisory covering 25 CVEs
 before 0:6.12.0-211.49.1.el10_2
0:6.12.0-211.49.1.el10_2
kernel-modules-core
Red Hat:enterprise_linux:10.2
From an advisory covering 25 CVEs
 before 0:6.12.0-211.49.1.el10_2
0:6.12.0-211.49.1.el10_2
kernel-modules-extra
Red Hat:enterprise_linux:10.2
From an advisory covering 25 CVEs
 before 0:6.12.0-211.49.1.el10_2
0:6.12.0-211.49.1.el10_2
kernel-modules-extra-matched
Red Hat:enterprise_linux:10.2
From an advisory covering 25 CVEs
 before 0:6.12.0-211.49.1.el10_2
0:6.12.0-211.49.1.el10_2
kernel-tools
Red Hat:enterprise_linux:10.2
From an advisory covering 25 CVEs
 before 0:6.12.0-211.49.1.el10_2
0:6.12.0-211.49.1.el10_2
kernel-tools-libs
Red Hat:enterprise_linux:10.2
From an advisory covering 25 CVEs
 before 0:6.12.0-211.49.1.el10_2
0:6.12.0-211.49.1.el10_2
kernel-uki-virt
Red Hat:enterprise_linux:10.2
From an advisory covering 25 CVEs
 before 0:6.12.0-211.49.1.el10_2
0:6.12.0-211.49.1.el10_2
kernel-uki-virt-addons
Red Hat:enterprise_linux:10.2
From an advisory covering 25 CVEs
 before 0:6.12.0-211.49.1.el10_2
0:6.12.0-211.49.1.el10_2
kernel-zfcpdump
Red Hat:enterprise_linux:10.2
From an advisory covering 25 CVEs
 before 0:6.12.0-211.49.1.el10_2
0:6.12.0-211.49.1.el10_2
kernel-zfcpdump-core
Red Hat:enterprise_linux:10.2
From an advisory covering 25 CVEs
 before 0:6.12.0-211.49.1.el10_2
0:6.12.0-211.49.1.el10_2
kernel-zfcpdump-modules
Red Hat:enterprise_linux:10.2
From an advisory covering 25 CVEs
 before 0:6.12.0-211.49.1.el10_2
0:6.12.0-211.49.1.el10_2
kernel-zfcpdump-modules-core
Red Hat:enterprise_linux:10.2
From an advisory covering 25 CVEs
 before 0:6.12.0-211.49.1.el10_2
0:6.12.0-211.49.1.el10_2
kernel
Rocky Linux:10
From an advisory covering 24 CVEs
 before 0:6.12.0-211.49.1.el10_2
0:6.12.0-211.49.1.el10_2
kernel
Rocky Linux:9
From an advisory covering 26 CVEs
 before 0:5.14.0-687.41.1.el9_8
0:5.14.0-687.41.1.el9_8
kernel
Rocky Linux:8
From an advisory covering 9 CVEs
 before 0:4.18.0-553.157.1.el8_10
0:4.18.0-553.157.1.el8_10
kernel-rt
Rocky Linux:8
From an advisory covering 9 CVEs
 before 0:4.18.0-553.157.1.rt7.498.el8_10
0:4.18.0-553.157.1.rt7.498.el8_10
kernel-default
SUSE:Linux Micro 6.0
From an advisory covering 1056 CVEs
 before 6.4.0-159998.55.1
6.4.0-159998.55.1
kernel-default-base
SUSE:Linux Micro 6.0
From an advisory covering 1056 CVEs
 before 6.4.0-159998.55.1.159998.21.42
6.4.0-159998.55.1.159998.21.42
kernel-kvmsmall
SUSE:Linux Micro 6.0
From an advisory covering 1056 CVEs
 before 6.4.0-159998.55.1
6.4.0-159998.55.1
kernel-source
SUSE:Linux Micro 6.0
From an advisory covering 1056 CVEs
 before 6.4.0-159998.55.1
6.4.0-159998.55.1
kernel-64kb
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 1077 CVEs
 before 6.4.0-150700.53.90.1
6.4.0-150700.53.90.1
kernel-default
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 1077 CVEs
 before 6.4.0-150700.53.90.1
6.4.0-150700.53.90.1
kernel-default-base
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 1077 CVEs
 before 6.4.0-150700.53.90.1.150700.17.51.1
6.4.0-150700.53.90.1.150700.17.51.1
kernel-source
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 1077 CVEs
 before 6.4.0-150700.53.90.1
6.4.0-150700.53.90.1
kernel-zfcpdump
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 1077 CVEs
 before 6.4.0-150700.53.90.1
6.4.0-150700.53.90.1
kernel-docs
SUSE:Linux Enterprise Module for Development Tools 15 SP7
From an advisory covering 1077 CVEs
 before 6.4.0-150700.53.90.1
6.4.0-150700.53.90.1
kernel-obs-build
SUSE:Linux Enterprise Module for Development Tools 15 SP7
From an advisory covering 1077 CVEs
 before 6.4.0-150700.53.90.1
6.4.0-150700.53.90.1
kernel-source
SUSE:Linux Enterprise Module for Development Tools 15 SP7
From an advisory covering 1077 CVEs
 before 6.4.0-150700.53.90.1
6.4.0-150700.53.90.1
kernel-syms
SUSE:Linux Enterprise Module for Development Tools 15 SP7
From an advisory covering 1077 CVEs
 before 6.4.0-150700.53.90.1
6.4.0-150700.53.90.1
kernel-default
SUSE:Linux Enterprise Module for Legacy 15 SP7
From an advisory covering 1077 CVEs
 before 6.4.0-150700.53.90.1
6.4.0-150700.53.90.1
kernel-default
SUSE:Linux Enterprise Live Patching 15 SP7
From an advisory covering 1077 CVEs
 before 6.4.0-150700.53.90.1
6.4.0-150700.53.90.1
kernel-livepatch-SLE15-SP7_Update_24
SUSE:Linux Enterprise Live Patching 15 SP7
From an advisory covering 1077 CVEs
 before 1-150700.15.3.1
1-150700.15.3.1
kernel-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP7
From an advisory covering 1077 CVEs
 before 6.4.0-150700.53.90.1
6.4.0-150700.53.90.1
kernel-default
SUSE:Linux Enterprise High Availability Extension 15 SP7
From an advisory covering 1077 CVEs
 before 6.4.0-150700.53.90.1
6.4.0-150700.53.90.1
kernel-default
SUSE:Linux Enterprise Workstation Extension 15 SP7
From an advisory covering 1077 CVEs
 before 6.4.0-150700.53.90.1
6.4.0-150700.53.90.1
kernel-default
SUSE:Linux Enterprise Live Patching 12 SP5
From an advisory covering 130 CVEs
 before 4.12.14-122.339.1
4.12.14-122.339.1
kgraft-patch-SLE12-SP5_Update_90
SUSE:Linux Enterprise Live Patching 12 SP5
From an advisory covering 130 CVEs
 before 1-8.3.1
1-8.3.1
kernel-default
SUSE:Linux Enterprise Server 12 SP5-LTSS
From an advisory covering 130 CVEs
 before 4.12.14-122.339.1
4.12.14-122.339.1
kernel-source
SUSE:Linux Enterprise Server 12 SP5-LTSS
From an advisory covering 130 CVEs
 before 4.12.14-122.339.1
4.12.14-122.339.1
kernel-syms
SUSE:Linux Enterprise Server 12 SP5-LTSS
From an advisory covering 130 CVEs
 before 4.12.14-122.339.1
4.12.14-122.339.1
kernel-default
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
From an advisory covering 130 CVEs
 before 4.12.14-122.339.1
4.12.14-122.339.1
kernel-source
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
From an advisory covering 130 CVEs
 before 4.12.14-122.339.1
4.12.14-122.339.1
kernel-syms
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
From an advisory covering 130 CVEs
 before 4.12.14-122.339.1
4.12.14-122.339.1
linux-hwe-edge
Ubuntu:16.04:LTS
 All versions, plus listed versions
4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1
Show 18 moreShow less
4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1
 None known
linux-aws-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30
 None known
linux-aws-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1
Show 5 moreShow less
5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37
 None known
linux-azure
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9
Show 39 moreShow less
4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38
 None known
linux-azure-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1
Show 11 moreShow less
5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36
 None known
linux-azure-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2
 None known
linux-gcp
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8
Show 33 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35
 None known
linux-gcp-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1
Show 8 moreShow less
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1
 None known
linux-gke-4.15
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38
Show 28 moreShow less
4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84
 None known
linux-gke-5.4
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1
Show 32 moreShow less
5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1
 None known
linux-gkeop-5.4
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1
Show 32 moreShow less
5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1
 None known
linux-hwe
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1
Show 38 moreShow less
4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72
 None known
linux-hwe-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1
Show 5 moreShow less
5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2
 None known
linux-oem
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12
Show 45 moreShow less
4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114
 None known
linux-oracle-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19
 None known
linux-oracle-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1
Show 4 moreShow less
5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1
 None known
linux-aws-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1009.9~20.04.25.11.0-1014.15~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1
Show 7 moreShow less
5.11.0-1020.21~20.04.25.11.0-1021.22~20.04.25.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1
 None known
linux-aws-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1008.9~20.04.25.13.0-1011.12~20.04.15.13.0-1012.13~20.04.15.13.0-1014.15~20.04.15.13.0-1017.19~20.04.1
Show 8 moreShow less
5.13.0-1019.21~20.04.15.13.0-1021.23~20.04.25.13.0-1022.24~20.04.15.13.0-1023.25~20.04.15.13.0-1025.27~20.04.15.13.0-1028.31~20.04.15.13.0-1029.32~20.04.15.13.0-1031.35~20.04.1
 None known
linux-aws-5.15
Ubuntu:Pro:20.04:LTS
 before 5.15.0-1117.124~20.04.1, plus listed versions
5.15.0-1014.18~20.04.15.15.0-1015.19~20.04.15.15.0-1017.21~20.04.15.15.0-1019.23~20.04.15.15.0-1020.24~20.04.1
Show 45 moreShow less
5.15.0-1021.25~20.04.15.15.0-1022.26~20.04.15.15.0-1023.27~20.04.15.15.0-1026.30~20.04.25.15.0-1027.31~20.04.15.15.0-1028.32~20.04.15.15.0-1030.34~20.04.15.15.0-1031.35~20.04.15.15.0-1033.37~20.04.15.15.0-1034.38~20.04.15.15.0-1035.39~20.04.15.15.0-1036.40~20.04.15.15.0-1037.41~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.15.15.0-1040.45~20.04.15.15.0-1041.46~20.04.15.15.0-1043.48~20.04.15.15.0-1044.49~20.04.15.15.0-1045.50~20.04.15.15.0-1047.52~20.04.15.15.0-1048.53~20.04.15.15.0-1049.54~20.04.15.15.0-1050.55~20.04.15.15.0-1051.56~20.04.15.15.0-1052.57~20.04.15.15.0-1053.58~20.04.15.15.0-1055.60~20.04.15.15.0-1056.61~20.04.15.15.0-1057.63~20.04.15.15.0-1058.64~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.15.15.0-1063.69~20.04.15.15.0-1064.70~20.04.15.15.0-1065.71~20.04.15.15.0-1066.72~20.04.15.15.0-1067.73~20.04.15.15.0-1068.74~20.04.15.15.0-1069.75~20.04.15.15.0-1070.76~20.04.15.15.0-1071.77~20.04.15.15.0-1072.78~20.04.15.15.0-1073.79~20.04.15.15.0-1075.82~20.04.1
5.15.0-1117.124~20.04.1
linux-aws-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1041.43~20.04.15.8.0-1042.44~20.04.1
 None known
linux-azure-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1007.7~20.04.25.11.0-1012.13~20.04.15.11.0-1013.14~20.04.15.11.0-1015.16~20.04.15.11.0-1017.18~20.04.1
Show 8 moreShow less
5.11.0-1019.20~20.04.15.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.2
 None known
linux-azure-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1009.10~20.04.25.13.0-1012.14~20.04.15.13.0-1013.15~20.04.15.13.0-1014.16~20.04.15.13.0-1017.19~20.04.1
Show 7 moreShow less
5.13.0-1021.24~20.04.15.13.0-1022.26~20.04.15.13.0-1023.27~20.04.15.13.0-1025.29~20.04.15.13.0-1028.33~20.04.15.13.0-1029.34~20.04.15.13.0-1031.37~20.04.1
 None known
linux-azure-5.15
Ubuntu:Pro:20.04:LTS
 before 5.15.0-1123.132~20.04.1, plus listed versions
5.15.0-1007.8~20.04.15.15.0-1008.9~20.04.15.15.0-1013.16~20.04.15.15.0-1014.17~20.04.15.15.0-1017.20~20.04.1
Show 45 moreShow less
5.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.29~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1033.40~20.04.15.15.0-1034.41~20.04.15.15.0-1035.42~20.04.15.15.0-1036.43~20.04.15.15.0-1037.44~20.04.15.15.0-1038.45~20.04.15.15.0-1039.46~20.04.15.15.0-1040.47~20.04.15.15.0-1041.48~20.04.15.15.0-1042.49~20.04.15.15.0-1043.50~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.59~20.04.15.15.0-1052.60~20.04.15.15.0-1053.61~20.04.15.15.0-1054.62~20.04.15.15.0-1056.64~20.04.15.15.0-1057.65~20.04.15.15.0-1058.66~20.04.25.15.0-1059.67~20.04.15.15.0-1060.69~20.04.15.15.0-1061.70~20.04.15.15.0-1063.72~20.04.15.15.0-1064.73~20.04.15.15.0-1065.74~20.04.15.15.0-1067.76~20.04.15.15.0-1068.77~20.04.15.15.0-1070.79~20.04.15.15.0-1071.80~20.04.15.15.0-1072.81~20.04.15.15.0-1073.82~20.04.15.15.0-1074.83~20.04.15.15.0-1075.84~20.04.1
5.15.0-1123.132~20.04.1
linux-azure-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1033.35~20.04.15.8.0-1036.38~20.04.15.8.0-1039.42~20.04.15.8.0-1040.43~20.04.15.8.0-1041.44~20.04.15.8.0-1042.45~20.04.15.8.0-1043.46~20.04.1
 None known
linux-azure-fde
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-1063.66+cvm2.25.4.0-1063.66+cvm3.25.4.0-1064.67+cvm1.15.4.0-1065.68+cvm2.15.4.0-1067.70+cvm1.1
Show 21 moreShow less
5.4.0-1068.71+cvm1.15.4.0-1069.72+cvm1.15.4.0-1070.73+cvm1.15.4.0-1072.75+cvm1.15.4.0-1073.76+cvm1.15.4.0-1074.77+cvm1.15.4.0-1076.79+cvm1.15.4.0-1078.81+cvm1.15.4.0-1080.83+cvm1.15.4.0-1083.87+cvm1.15.4.0-1085.90+cvm1.15.4.0-1085.90+cvm2.15.4.0-1086.91+cvm1.15.4.0-1089.94+cvm1.25.4.0-1090.95+cvm1.15.4.0-1091.96+cvm1.15.4.0-1092.97+cvm1.15.4.0-1095.101+cvm1.15.4.0-1098.104+cvm1.15.4.0-1100.106+cvm1.15.4.0-1103.109+cvm1.1
 None known
linux-azure-fde-5.15
Ubuntu:Pro:20.04:LTS
 before 5.15.0-1122.131~20.04.1, plus listed versions
5.15.0-1019.24~20.04.1.15.15.0-1020.25~20.04.1.15.15.0-1021.26~20.04.1.15.15.0-1029.36~20.04.1.15.15.0-1030.37~20.04.1.1
Show 45 moreShow less
5.15.0-1031.38~20.04.1.15.15.0-1033.40~20.04.1.15.15.0-1034.41~20.04.1.25.15.0-1035.42~20.04.1.15.15.0-1036.43~20.04.1.15.15.0-1037.44~20.04.1.15.15.0-1038.45~20.04.1.15.15.0-1039.46~20.04.1.15.15.0-1040.47~20.04.1.15.15.0-1041.48~20.04.1.15.15.0-1042.49~20.04.1.15.15.0-1043.50~20.04.1.15.15.0-1046.53~20.04.1.15.15.0-1047.54~20.04.1.15.15.0-1049.56~20.04.1.15.15.0-1050.57~20.04.1.15.15.0-1051.59~20.04.1.15.15.0-1052.60~20.04.1.15.15.0-1053.61~20.04.1.15.15.0-1054.62~20.04.1.15.15.0-1056.64~20.04.1.15.15.0-1057.65~20.04.1.15.15.0-1058.66~20.04.2.15.15.0-1059.67~20.04.1.15.15.0-1060.69~20.04.1.15.15.0-1061.70~20.04.1.15.15.0-1063.72~20.04.1.15.15.0-1064.73~20.04.1.15.15.0-1065.74~20.04.1.15.15.0-1067.76~20.04.1.15.15.0-1068.77~20.04.1.15.15.0-1070.79~20.04.1.15.15.0-1071.80~20.04.1.15.15.0-1072.81~20.04.1.15.15.0-1073.82~20.04.1.15.15.0-1074.83~20.04.1.15.15.0-1076.85~20.04.1.15.15.0-1078.87~20.04.1.15.15.0-1081.90~20.04.1.15.15.0-1082.91~20.04.1.15.15.0-1086.95~20.04.1.15.15.0-1087.96~20.04.1.15.15.0-1088.97~20.04.1.15.15.0-1089.98~20.04.1.15.15.0-1091.100~20.04.1.1
5.15.0-1122.131~20.04.1
linux-gcp-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1009.10~20.04.15.11.0-1014.16~20.04.15.11.0-1017.19~20.04.15.11.0-1018.20~20.04.25.11.0-1020.22~20.04.1
Show 7 moreShow less
5.11.0-1021.23~20.04.15.11.0-1022.24~20.04.15.11.0-1023.25~20.04.15.11.0-1024.26~20.04.15.11.0-1026.29~20.04.15.11.0-1028.32~20.04.15.11.0-1029.33~20.04.3
 None known
linux-gcp-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1008.9~20.04.35.13.0-1012.15~20.04.15.13.0-1013.16~20.04.15.13.0-1015.18~20.04.15.13.0-1019.23~20.04.1
Show 8 moreShow less
5.13.0-1021.25~20.04.15.13.0-1023.28~20.04.15.13.0-1024.29~20.04.15.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1030.36~20.04.15.13.0-1031.37~20.04.15.13.0-1033.40~20.04.1
 None known
linux-gcp-5.15
Ubuntu:Pro:20.04:LTS
 before 5.15.0-1118.128~20.04.1, plus listed versions
5.15.0-1006.9~20.04.15.15.0-1012.17~20.04.15.15.0-1013.18~20.04.15.15.0-1016.21~20.04.15.15.0-1017.23~20.04.2
Show 45 moreShow less
5.15.0-1018.24~20.04.15.15.0-1021.28~20.04.15.15.0-1022.29~20.04.15.15.0-1025.32~20.04.25.15.0-1026.33~20.04.15.15.0-1027.34~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1032.40~20.04.15.15.0-1033.41~20.04.15.15.0-1034.42~20.04.15.15.0-1035.43~20.04.15.15.0-1036.44~20.04.15.15.0-1037.45~20.04.15.15.0-1038.46~20.04.15.15.0-1039.47~20.04.15.15.0-1040.48~20.04.15.15.0-1041.49~20.04.15.15.0-1042.50~20.04.15.15.0-1044.52~20.04.15.15.0-1045.53~20.04.25.15.0-1046.54~20.04.15.15.0-1047.55~20.04.15.15.0-1048.56~20.04.15.15.0-1049.57~20.04.15.15.0-1051.59~20.04.15.15.0-1052.60~20.04.15.15.0-1053.61~20.04.15.15.0-1054.62~20.04.15.15.0-1055.63~20.04.15.15.0-1058.66~20.04.15.15.0-1059.67~20.04.15.15.0-1060.68~20.04.15.15.0-1062.70~20.04.15.15.0-1065.73~20.04.15.15.0-1066.74~20.04.15.15.0-1067.75~20.04.15.15.0-1068.76~20.04.15.15.0-1069.77~20.04.15.15.0-1070.78~20.04.15.15.0-1071.79~20.04.15.15.0-1072.80~20.04.15.15.0-1073.81~20.04.15.15.0-1074.83~20.04.1
5.15.0-1118.128~20.04.1
linux-gcp-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1032.34~20.04.15.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1039.41
 None known
linux-gke
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-1033.355.4.0-1035.375.4.0-1036.385.4.0-1037.395.4.0-1039.41
Show 45 moreShow less
5.4.0-1041.435.4.0-1042.445.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1065.685.4.0-1066.695.4.0-1067.705.4.0-1068.715.4.0-1071.765.4.0-1072.775.4.0-1074.795.4.0-1076.825.4.0-1078.845.4.0-1080.865.4.0-1081.875.4.0-1083.895.4.0-1084.905.4.0-1086.935.4.0-1087.945.4.0-1090.975.4.0-1091.985.4.0-1094.1015.4.0-1095.1025.4.0-1096.1035.4.0-1097.1045.4.0-1098.1055.4.0-1099.1065.4.0-1100.1075.4.0-1101.1085.4.0-1102.1095.4.0-1103.1105.4.0-1104.111
 None known
linux-gke-5.15
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.15.0-1011.14~20.04.15.15.0-1014.17~20.04.15.15.0-1015.18~20.04.15.15.0-1016.19~20.04.15.15.0-1019.23~20.04.1
Show 13 moreShow less
5.15.0-1020.25~20.04.15.15.0-1023.28~20.04.25.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1029.34~20.04.15.15.0-1031.36~20.04.15.15.0-1032.37~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.1
 None known
linux-gkeop
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-1008.95.4.0-1009.105.4.0-1010.115.4.0-1011.125.4.0-1012.13
Show 45 moreShow less
5.4.0-1013.145.4.0-1014.155.4.0-1015.165.4.0-1016.175.4.0-1018.195.4.0-1021.225.4.0-1022.235.4.0-1023.245.4.0-1024.255.4.0-1025.265.4.0-1026.275.4.0-1027.285.4.0-1029.305.4.0-1031.325.4.0-1032.335.4.0-1033.345.4.0-1034.355.4.0-1036.375.4.0-1037.385.4.0-1038.395.4.0-1039.405.4.0-1040.415.4.0-1043.445.4.0-1046.485.4.0-1048.515.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1056.605.4.0-1057.615.4.0-1060.645.4.0-1061.655.4.0-1062.665.4.0-1064.685.4.0-1065.695.4.0-1066.705.4.0-1067.715.4.0-1068.725.4.0-1069.735.4.0-1070.745.4.0-1071.755.4.0-1072.765.4.0-1073.77
 None known
linux-gkeop-5.15
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.15.0-1003.5~20.04.25.15.0-1005.7~20.04.15.15.0-1007.10~20.04.15.15.0-1008.12~20.04.15.15.0-1011.15~20.04.2
Show 40 moreShow less
5.15.0-1012.16~20.04.15.15.0-1013.17~20.04.15.15.0-1015.19~20.04.15.15.0-1016.21~20.04.15.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.28~20.04.15.15.0-1024.29~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1030.35~20.04.15.15.0-1031.37~20.04.15.15.0-1032.38~20.04.15.15.0-1033.39~20.04.15.15.0-1034.40~20.04.15.15.0-1035.41~20.04.15.15.0-1036.42~20.04.15.15.0-1037.43~20.04.15.15.0-1038.44~20.04.15.15.0-1039.45~20.04.15.15.0-1040.46~20.04.15.15.0-1043.50~20.04.15.15.0-1044.51~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1048.55~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.58~20.04.15.15.0-1052.59~20.04.15.15.0-1053.60~20.04.15.15.0-1054.61~20.04.15.15.0-1055.62~20.04.1
 None known
linux-hwe-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-22.23~20.04.15.11.0-25.27~20.04.15.11.0-27.29~20.04.15.11.0-34.36~20.04.15.11.0-36.40~20.04.1
Show 7 moreShow less
5.11.0-37.41~20.04.25.11.0-38.42~20.04.15.11.0-40.44~20.04.25.11.0-41.45~20.04.15.11.0-43.47~20.04.25.11.0-44.48~20.04.25.11.0-46.51~20.04.1
 None known
linux-hwe-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-21.21~20.04.15.13.0-22.22~20.04.15.13.0-23.23~20.04.25.13.0-25.26~20.04.15.13.0-27.29~20.04.1
Show 11 moreShow less
5.13.0-28.31~20.04.15.13.0-30.33~20.04.15.13.0-35.40~20.04.15.13.0-37.42~20.04.15.13.0-39.44~20.04.15.13.0-40.45~20.04.15.13.0-41.46~20.04.15.13.0-44.49~20.04.15.13.0-48.54~20.04.15.13.0-51.58~20.04.15.13.0-52.59~20.04.1
 None known
linux-hwe-5.15
Ubuntu:Pro:20.04:LTS
 before 5.15.0-198.208~20.04.1, plus listed versions
5.15.0-33.34~20.04.15.15.0-41.44~20.04.15.15.0-43.46~20.04.15.15.0-46.49~20.04.15.15.0-48.54~20.04.1
Show 45 moreShow less
5.15.0-50.56~20.04.15.15.0-52.58~20.04.15.15.0-53.59~20.04.15.15.0-56.62~20.04.15.15.0-57.63~20.04.15.15.0-58.64~20.04.15.15.0-60.66~20.04.15.15.0-67.74~20.04.15.15.0-69.76~20.04.15.15.0-70.77~20.04.15.15.0-71.78~20.04.15.15.0-72.79~20.04.15.15.0-73.80~20.04.15.15.0-75.82~20.04.15.15.0-76.83~20.04.15.15.0-78.85~20.04.15.15.0-79.86~20.04.25.15.0-82.91~20.04.15.15.0-83.92~20.04.15.15.0-84.93~20.04.15.15.0-86.96~20.04.15.15.0-87.97~20.04.15.15.0-88.98~20.04.15.15.0-89.99~20.04.15.15.0-91.101~20.04.15.15.0-92.102~20.04.15.15.0-94.104~20.04.15.15.0-97.107~20.04.15.15.0-100.110~20.04.15.15.0-101.111~20.04.15.15.0-102.112~20.04.15.15.0-105.115~20.04.15.15.0-106.116~20.04.15.15.0-107.117~20.04.15.15.0-113.123~20.04.15.15.0-116.126~20.04.15.15.0-117.127~20.04.15.15.0-118.128~20.04.15.15.0-119.129~20.04.15.15.0-121.131~20.04.15.15.0-122.132~20.04.15.15.0-124.134~20.04.15.15.0-125.135~20.04.15.15.0-126.136~20.04.15.15.0-127.137~20.04.1
5.15.0-198.208~20.04.1
linux-hwe-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-23.24~20.04.15.8.0-25.26~20.04.15.8.0-28.30~20.04.15.8.0-29.31~20.04.15.8.0-31.33~20.04.1
Show 16 moreShow less
5.8.0-33.36~20.04.15.8.0-34.37~20.04.25.8.0-36.40~20.04.15.8.0-38.43~20.04.15.8.0-40.45~20.04.15.8.0-41.46~20.04.15.8.0-43.49~20.04.15.8.0-44.50~20.04.15.8.0-45.51~20.04.15.8.0-48.54~20.04.15.8.0-49.55~20.04.15.8.0-50.56~20.04.15.8.0-53.60~20.04.15.8.0-55.62~20.04.15.8.0-59.66~20.04.15.8.0-63.71~20.04.1
 None known
linux-ibm-5.15
Ubuntu:Pro:20.04:LTS
 before 5.15.0-1111.115~20.04.1, plus listed versions
5.15.0-1033.36~20.04.15.15.0-1034.37~20.04.15.15.0-1035.38~20.04.15.15.0-1036.39~20.04.15.15.0-1037.40~20.04.1
Show 45 moreShow less
5.15.0-1038.41~20.04.15.15.0-1040.43~20.04.15.15.0-1041.44~20.04.15.15.0-1042.45~20.04.15.15.0-1043.46~20.04.15.15.0-1044.47~20.04.15.15.0-1045.48~20.04.15.15.0-1046.49~20.04.15.15.0-1047.50~20.04.15.15.0-1048.51~20.04.15.15.0-1049.52~20.04.15.15.0-1050.53~20.04.15.15.0-1053.56~20.04.15.15.0-1054.57~20.04.15.15.0-1055.58~20.04.15.15.0-1057.60~20.04.15.15.0-1058.61~20.04.15.15.0-1059.62~20.04.15.15.0-1060.63~20.04.15.15.0-1061.64~20.04.15.15.0-1062.65~20.04.15.15.0-1063.66~20.04.15.15.0-1064.67~20.04.15.15.0-1065.68~20.04.15.15.0-1066.69~20.04.15.15.0-1067.70~20.04.15.15.0-1068.71~20.04.15.15.0-1069.72~20.04.15.15.0-1074.77~20.04.15.15.0-1075.78~20.04.15.15.0-1076.79~20.04.15.15.0-1078.81~20.04.15.15.0-1079.82~20.04.15.15.0-1080.83~20.04.15.15.0-1081.84~20.04.15.15.0-1083.86~20.04.15.15.0-1085.88~20.04.15.15.0-1086.89~20.04.15.15.0-1087.90~20.04.15.15.0-1089.92~20.04.15.15.0-1090.93~20.04.15.15.0-1091.94~20.04.15.15.0-1092.95~20.04.15.15.0-1093.96~20.04.15.15.0-1094.97~20.04.1
5.15.0-1111.115~20.04.1
linux-intel-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1007.75.13.0-1008.85.13.0-1009.95.13.0-1010.105.13.0-1011.115.13.0-1014.155.13.0-1017.19
 None known
linux-intel-iotg-5.15
Ubuntu:Pro:20.04:LTS
 before 5.15.0-1112.118~20.04.1, plus listed versions
5.15.0-1003.5~20.04.15.15.0-1008.11~20.04.15.15.0-1010.14~20.04.15.15.0-1015.20~20.04.25.15.0-1016.21~20.04.1
Show 45 moreShow less
5.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1021.26~20.04.15.15.0-1023.28~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1030.35~20.04.15.15.0-1031.36~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1040.46~20.04.15.15.0-1043.49~20.04.15.15.0-1045.51~20.04.15.15.0-1046.52~20.04.15.15.0-1048.54~20.04.15.15.0-1049.55~20.04.15.15.0-1050.56~20.04.15.15.0-1051.57~20.04.15.15.0-1052.58~20.04.15.15.0-1055.61~20.04.15.15.0-1058.64~20.04.15.15.0-1059.65~20.04.15.15.0-1060.66~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.15.15.0-1063.69~20.04.15.15.0-1064.70~20.04.15.15.0-1065.71~20.04.15.15.0-1066.72~20.04.15.15.0-1067.73~20.04.15.15.0-1071.77~20.04.15.15.0-1072.78~20.04.15.15.0-1073.79~20.04.25.15.0-1074.80~20.04.15.15.0-1077.83~20.04.15.15.0-1078.84~20.04.15.15.0-1079.85~20.04.15.15.0-1083.89~20.04.15.15.0-1084.90~20.04.15.15.0-1085.91~20.04.15.15.0-1086.92~20.04.1
5.15.0-1112.118~20.04.1
linux-lowlatency-hwe-5.15
Ubuntu:Pro:20.04:LTS
 before 5.15.0-195.205~20.04.1, plus listed versions
5.15.0-33.34~20.04.15.15.0-42.45~20.04.15.15.0-43.46~20.04.15.15.0-46.49~20.04.15.15.0-48.54~20.04.1
Show 45 moreShow less
5.15.0-50.56~20.04.15.15.0-52.58~20.04.15.15.0-53.59~20.04.15.15.0-56.62~20.04.15.15.0-58.64~20.04.15.15.0-60.66~20.04.15.15.0-67.74~20.04.15.15.0-69.76~20.04.15.15.0-70.77~20.04.15.15.0-71.78~20.04.15.15.0-72.79~20.04.15.15.0-73.80~20.04.15.15.0-75.82~20.04.15.15.0-76.83~20.04.15.15.0-78.85~20.04.15.15.0-79.88~20.04.15.15.0-82.91~20.04.15.15.0-83.92~20.04.15.15.0-84.93~20.04.15.15.0-86.95~20.04.15.15.0-87.96~20.04.15.15.0-88.98~20.04.15.15.0-89.99~20.04.15.15.0-91.101~20.04.15.15.0-92.102~20.04.15.15.0-94.104~20.04.15.15.0-97.107~20.04.15.15.0-100.110~20.04.15.15.0-101.111~20.04.15.15.0-102.112~20.04.15.15.0-105.115~20.04.15.15.0-106.116~20.04.15.15.0-107.117~20.04.15.15.0-110.120~20.04.15.15.0-113.123~20.04.15.15.0-116.126~20.04.15.15.0-117.127~20.04.15.15.0-118.128~20.04.15.15.0-119.129~20.04.15.15.0-121.131~20.04.15.15.0-122.132~20.04.15.15.0-124.134~20.04.15.15.0-125.135~20.04.15.15.0-126.136~20.04.15.15.0-127.137~20.04.1
5.15.0-195.205~20.04.1
linux-nvidia-tegra-5.15
Ubuntu:Pro:20.04:LTS
 before 5.15.0-1070.72~20.04.1, plus listed versions
5.15.0-1009.9~20.04.15.15.0-1010.10~20.04.15.15.0-1012.12~20.04.15.15.0-1014.14~20.04.15.15.0-1015.15~20.04.1
Show 36 moreShow less
5.15.0-1016.16~20.04.15.15.0-1017.17~20.04.15.15.0-1018.18~20.04.15.15.0-1019.19~20.04.15.15.0-1020.20~20.04.15.15.0-1022.22~20.04.15.15.0-1025.25~20.04.15.15.0-1027.27~20.04.15.15.0-1030.30~20.04.15.15.0-1032.32~20.04.15.15.0-1039.39~20.04.15.15.0-1040.40~20.04.15.15.0-1041.41~20.04.15.15.0-1042.42~20.04.15.15.0-1043.43~20.04.15.15.0-1044.44~20.04.15.15.0-1045.45~20.04.15.15.0-1046.46~20.04.15.15.0-1047.47~20.04.15.15.0-1048.48~20.04.15.15.0-1049.49~20.04.15.15.0-1050.50~20.04.15.15.0-1051.51~20.04.15.15.0-1052.52~20.04.25.15.0-1053.53~20.04.15.15.0-1055.55~20.04.15.15.0-1057.57~20.04.15.15.0-1058.58~20.04.15.15.0-1060.60~20.04.15.15.0-1061.61~20.04.15.15.0-1063.63~20.04.15.15.0-1064.66~20.04.15.15.0-1065.67~20.04.15.15.0-1066.68~20.04.15.15.0-1067.69~20.04.15.15.0-1068.70~20.04.1
5.15.0-1070.72~20.04.1
linux-oem-5.10
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.10.0-1008.95.10.0-1011.125.10.0-1013.145.10.0-1014.155.10.0-1016.17
Show 21 moreShow less
5.10.0-1017.185.10.0-1019.205.10.0-1021.225.10.0-1022.235.10.0-1023.245.10.0-1025.265.10.0-1026.275.10.0-1029.305.10.0-1032.335.10.0-1033.345.10.0-1034.355.10.0-1038.405.10.0-1044.465.10.0-1045.475.10.0-1049.515.10.0-1050.525.10.0-1051.535.10.0-1052.545.10.0-1053.555.10.0-1055.585.10.0-1057.61
 None known
linux-oem-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1009.105.13.0-1010.115.13.0-1012.165.13.0-1014.185.13.0-1017.21
Show 7 moreShow less
5.13.0-1019.235.13.0-1020.245.13.0-1021.255.13.0-1022.265.13.0-1026.325.13.0-1028.355.13.0-1029.36
 None known
linux-oem-5.14
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.14.0-1004.45.14.0-1005.55.14.0-1007.75.14.0-1008.85.14.0-1010.10
Show 30 moreShow less
5.14.0-1011.115.14.0-1013.135.14.0-1018.195.14.0-1020.225.14.0-1022.245.14.0-1024.265.14.0-1027.305.14.0-1029.325.14.0-1031.345.14.0-1032.355.14.0-1033.365.14.0-1034.375.14.0-1036.405.14.0-1038.425.14.0-1042.475.14.0-1044.495.14.0-1045.515.14.0-1046.535.14.0-1047.545.14.0-1048.555.14.0-1049.565.14.0-1050.575.14.0-1051.585.14.0-1052.595.14.0-1054.615.14.0-1055.625.14.0-1056.635.14.0-1057.645.14.0-1058.665.14.0-1059.67
 None known
linux-oem-5.6
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.6.0-1007.75.6.0-1008.85.6.0-1010.105.6.0-1011.115.6.0-1013.13
Show 24 moreShow less
5.6.0-1017.175.6.0-1018.185.6.0-1020.205.6.0-1021.215.6.0-1023.235.6.0-1026.265.6.0-1027.275.6.0-1028.285.6.0-1031.325.6.0-1032.335.6.0-1033.355.6.0-1034.365.6.0-1035.375.6.0-1036.395.6.0-1039.435.6.0-1042.465.6.0-1047.515.6.0-1048.525.6.0-1050.545.6.0-1052.565.6.0-1053.575.6.0-1054.585.6.0-1055.595.6.0-1056.60
 None known
linux-oracle-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1008.8~20.04.15.11.0-1013.14~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1
Show 7 moreShow less
5.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1
 None known
linux-oracle-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1011.13~20.04.25.13.0-1015.19~20.04.15.13.0-1016.20~20.04.15.13.0-1018.22~20.04.15.13.0-1021.26~20.04.1
Show 7 moreShow less
5.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1028.33~20.04.15.13.0-1030.35~20.04.15.13.0-1033.39~20.04.15.13.0-1034.40~20.04.15.13.0-1036.43~20.04.1
 None known
linux-oracle-5.15
Ubuntu:Pro:20.04:LTS
 before 5.15.0-1114.120~20.04.1, plus listed versions
5.15.0-1007.9~20.04.15.15.0-1013.17~20.04.15.15.0-1016.20~20.04.15.15.0-1017.22~20.04.15.15.0-1018.23~20.04.1
Show 45 moreShow less
5.15.0-1019.24~20.04.15.15.0-1021.27~20.04.15.15.0-1022.28~20.04.15.15.0-1025.31~20.04.25.15.0-1027.33~20.04.15.15.0-1029.35~20.04.15.15.0-1030.36~20.04.15.15.0-1032.38~20.04.15.15.0-1033.39~20.04.15.15.0-1034.40~20.04.15.15.0-1035.41~20.04.15.15.0-1036.42~20.04.15.15.0-1037.43~20.04.15.15.0-1038.44~20.04.15.15.0-1039.45~20.04.15.15.0-1040.46~20.04.15.15.0-1041.47~20.04.15.15.0-1042.48~20.04.15.15.0-1044.50~20.04.15.15.0-1045.51~20.04.15.15.0-1046.52~20.04.15.15.0-1047.53~20.04.15.15.0-1048.54~20.04.15.15.0-1049.55~20.04.15.15.0-1050.56~20.04.15.15.0-1051.57~20.04.15.15.0-1052.58~20.04.15.15.0-1053.59~20.04.15.15.0-1054.60~20.04.15.15.0-1055.61~20.04.15.15.0-1058.64~20.04.15.15.0-1059.65~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.15.15.0-1063.69~20.04.15.15.0-1065.71~20.04.15.15.0-1066.72~20.04.15.15.0-1067.73~20.04.15.15.0-1068.74~20.04.15.15.0-1069.75~20.04.15.15.0-1070.76~20.04.15.15.0-1071.77~20.04.15.15.0-1072.78~20.04.15.15.0-1073.79~20.04.15.15.0-1074.80~20.04.1
5.15.0-1114.120~20.04.1
linux-oracle-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1031.32~20.04.25.8.0-1033.34~20.04.15.8.0-1034.35~20.04.25.8.0-1037.38~20.04.15.8.0-1038.39~20.04.1
 None known
linux-raspi2
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.3.0-1007.85.3.0-1014.165.3.0-1015.175.3.0-1017.195.4.0-1004.45.4.0-1006.6
 None known
linux-riscv
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-24.285.4.0-26.305.4.0-27.315.4.0-28.325.4.0-30.34
Show 7 moreShow less
5.4.0-31.355.4.0-33.375.4.0-34.385.4.0-36.415.4.0-37.425.4.0-39.445.4.0-40.45
 None known
linux-riscv-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1015.16~20.04.15.11.0-1017.18~20.04.15.11.0-1018.19~20.04.25.11.0-1020.21~20.04.15.11.0-1021.22~20.04.1
Show 8 moreShow less
5.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1024.25~20.04.15.11.0-1026.28~20.04.15.11.0-1028.31~20.04.15.11.0-1029.32~20.04.15.11.0-1030.345.11.0-1031.35
 None known
linux-riscv-5.15
Ubuntu:Pro:20.04:LTS
 before 5.15.0-1111.115~20.04.1, plus listed versions
5.15.0-1015.17~20.04.15.15.0-1017.19~20.04.15.15.0-1018.21~20.04.15.15.0-1019.22~20.04.15.15.0-1022.26~20.04.1
Show 45 moreShow less
5.15.0-1023.27~20.04.15.15.0-1026.30~20.04.25.15.0-1027.31~20.04.15.15.0-1028.32~20.04.15.15.0-1029.33~20.04.15.15.0-1030.34~20.04.15.15.0-1031.35~20.04.15.15.0-1032.36~20.04.15.15.0-1033.37~20.04.15.15.0-1034.38~20.04.15.15.0-1035.39~20.04.15.15.0-1036.40~20.04.25.15.0-1037.41~20.04.25.15.0-1038.42~20.04.25.15.0-1039.43~20.04.25.15.0-1040.44~20.04.35.15.0-1041.45~20.04.15.15.0-1043.47~20.04.15.15.0-1044.48~20.04.15.15.0-1045.49~20.04.15.15.0-1046.50~20.04.15.15.0-1047.51~20.04.15.15.0-1048.52~20.04.15.15.0-1049.53~20.04.25.15.0-1050.54~20.04.15.15.0-1051.55~20.04.15.15.0-1052.56~20.04.15.15.0-1053.57~20.04.15.15.0-1056.60~20.04.15.15.0-1057.61~20.04.15.15.0-1058.62~20.04.15.15.0-1059.63~20.04.15.15.0-1060.64~20.04.15.15.0-1061.65~20.04.15.15.0-1062.66~20.04.15.15.0-1063.67~20.04.15.15.0-1064.68~20.04.15.15.0-1065.69~20.04.15.15.0-1066.70~20.04.15.15.0-1067.71~20.04.15.15.0-1068.72~20.04.15.15.0-1069.73~20.04.15.15.0-1070.74~20.04.15.15.0-1071.75~20.04.15.15.0-1072.76~20.04.1
5.15.0-1111.115~20.04.1
linux-riscv-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-14.16~20.04.15.8.0-14.16~20.04.35.8.0-16.18~20.04.15.8.0-17.19~20.04.15.8.0-18.20~20.04.1
Show 5 moreShow less
5.8.0-20.22~20.04.15.8.0-22.24~20.04.15.8.0-25.27~20.04.15.8.0-26.28~20.04.15.8.0-29.31~20.04.1
 None known
linux
Ubuntu:22.04:LTS
 before 5.15.0-198.208, plus listed versions
5.13.0-19.195.15.0-17.175.15.0-18.185.15.0-22.225.15.0-23.23
Show 45 moreShow less
5.15.0-25.255.15.0-27.285.15.0-30.315.15.0-33.345.15.0-35.365.15.0-37.395.15.0-39.425.15.0-40.435.15.0-41.445.15.0-43.465.15.0-46.495.15.0-47.515.15.0-48.545.15.0-50.565.15.0-52.585.15.0-53.595.15.0-56.625.15.0-57.635.15.0-58.645.15.0-60.665.15.0-67.745.15.0-69.765.15.0-70.775.15.0-71.785.15.0-72.795.15.0-73.805.15.0-75.825.15.0-76.835.15.0-78.855.15.0-79.865.15.0-82.915.15.0-83.925.15.0-84.935.15.0-86.965.15.0-87.975.15.0-88.985.15.0-89.995.15.0-91.1015.15.0-92.1025.15.0-94.1045.15.0-97.1075.15.0-100.1105.15.0-101.1115.15.0-102.1125.15.0-105.115
5.15.0-198.208
linux-allwinner-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1007.7~22.04.15.19.0-1009.9~22.04.15.19.0-1010.10~22.04.15.19.0-1011.11~22.04.15.19.0-1012.12~22.04.15.19.0-1013.13~22.04.15.19.0-1014.14~22.04.15.19.0-1015.15~22.04.1
 None known
linux-aws
Ubuntu:22.04:LTS
 before 5.15.0-1117.124, plus listed versions
5.13.0-1005.65.15.0-1002.45.15.0-1003.55.15.0-1004.65.15.0-1005.7
Show 45 moreShow less
5.15.0-1008.105.15.0-1009.115.15.0-1011.145.15.0-1013.175.15.0-1014.185.15.0-1015.195.15.0-1017.215.15.0-1019.235.15.0-1020.245.15.0-1021.255.15.0-1022.265.15.0-1023.275.15.0-1026.305.15.0-1027.315.15.0-1028.325.15.0-1030.345.15.0-1031.355.15.0-1033.375.15.0-1034.385.15.0-1035.395.15.0-1036.405.15.0-1037.415.15.0-1038.435.15.0-1039.445.15.0-1040.455.15.0-1042.475.15.0-1043.485.15.0-1044.495.15.0-1045.505.15.0-1047.525.15.0-1048.535.15.0-1049.545.15.0-1050.555.15.0-1051.565.15.0-1052.575.15.0-1053.585.15.0-1055.605.15.0-1056.615.15.0-1057.635.15.0-1060.665.15.0-1061.675.15.0-1062.685.15.0-1063.695.15.0-1064.705.15.0-1065.71
5.15.0-1117.124
linux-aws-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1019.20~22.04.15.19.0-1020.21~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.15.19.0-1024.25~22.04.1
Show 5 moreShow less
5.19.0-1025.26~22.04.15.19.0-1026.27~22.04.15.19.0-1027.28~22.04.15.19.0-1028.29~22.04.15.19.0-1029.30~22.04.1
 None known
linux-aws-6.2
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.2.0-1005.5~22.04.16.2.0-1006.6~22.04.16.2.0-1007.7~22.04.16.2.0-1008.8~22.04.16.2.0-1009.9~22.04.3
Show 9 moreShow less
6.2.0-1010.10~22.04.16.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1013.13~22.04.16.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.1
 None known
linux-aws-6.5
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.5.0-1008.8~22.04.16.5.0-1010.10~22.04.16.5.0-1011.11~22.04.16.5.0-1012.12~22.04.16.5.0-1014.14~22.04.1
Show 9 moreShow less
6.5.0-1015.15~22.04.16.5.0-1016.16~22.04.16.5.0-1017.17~22.04.26.5.0-1018.18~22.04.16.5.0-1020.20~22.04.16.5.0-1021.21~22.04.16.5.0-1022.22~22.04.16.5.0-1023.23~22.04.16.5.0-1024.24~22.04.1
 None known
linux-aws-6.8
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.8.0-1009.9~22.04.26.8.0-1010.10~22.04.26.8.0-1011.12~22.04.16.8.0-1013.14~22.04.16.8.0-1014.15~22.04.1
Show 41 moreShow less
6.8.0-1015.16~22.04.16.8.0-1016.17~22.04.26.8.0-1017.18~22.04.16.8.0-1018.19~22.04.16.8.0-1019.21~22.04.16.8.0-1020.22~22.04.16.8.0-1021.23~22.04.16.8.0-1023.25~22.04.16.8.0-1024.26~22.04.16.8.0-1027.29~22.04.16.8.0-1028.30~22.04.16.8.0-1029.31~22.04.16.8.0-1030.32~22.04.16.8.0-1031.33~22.04.16.8.0-1032.34~22.04.16.8.0-1033.35~22.04.16.8.0-1035.37~22.04.16.8.0-1036.38~22.04.16.8.0-1039.41~22.04.16.8.0-1040.42~22.04.16.8.0-1041.43~22.04.16.8.0-1042.44~22.04.16.8.0-1043.45~22.04.16.8.0-1044.46~22.04.16.8.0-1045.47~22.04.16.8.0-1046.49~22.04.16.8.0-1047.50~22.04.16.8.0-1050.53~22.04.16.8.0-1051.54~22.04.16.8.0-1052.55~22.04.16.8.0-1053.56~22.04.16.8.0-1055.58~22.04.16.8.0-1057.60~22.04.16.8.0-1060.63~22.04.16.8.0-1061.64~22.04.16.8.0-1062.65~22.04.26.8.0-1063.66~22.04.16.8.0-1064.67~22.04.16.8.0-1065.68~22.04.16.8.0-1066.69~22.04.16.8.0-1069.74~22.04.1
 None known

History

History
RecordedChangedSources
affectedOSV
affected, aliases, referencesOSV
affected, aliases, referencesOSV
affectedOSV
affected, aliases, referencesOSV
affectedOSV
affected, aliases, referencesOSV
affected, aliases, referencesOSV
affected, facts, referencesOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-68388 is a critical vulnerability (CVSS 9.8) in Linux, published August 10, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.51%, the 44th percentile. Fixed in linux-lts 6.1.189-r0.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 690 package rows, 508 versions, 5,883 references and the rest of 24 source descriptions. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open